Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 616
Alerts This Week
Warning Icon 1 616

Ubuntu: 5672-1 Critical: GMP Denial Of Service Impacting Multiple Versions

ubuntu
Calendar Grey October 12, 2022
Dist Ubuntu Esm H88
A newly discovered bug in GMP poses risks of system failures on Fedora. Users using affected versions should apply updates promptly.
GMP could be made to crash if it received specially crafted input.

Summary

GMP could be made to crash if it received specially crafted

input.

Software Description:

- gmp: Multiprecision arithmetic library developers tools

Details:

It was discovered that GMP did not properly manage memory

on 32-bit platforms when processing a specially crafted

input. An attacker could possibly use this issue to cause

applications using GMP to crash, resulting in a denial of

service.

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu 16.04 ubuntu 20.04 gmp ubuntu 18.04

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
libgmp-dev 2:6.2.0+dfsg-4ubuntu0.1
libgmp10 2:6.2.0+dfsg-4ubuntu0.1
libgmpxx4ldbl 2:6.2.0+dfsg-4ubuntu0.1

Ubuntu 18.04 LTS:
libgmp-dev 2:6.1.2+dfsg-2ubuntu0.1
libgmp10 2:6.1.2+dfsg-2ubuntu0.1
libgmpxx4ldbl 2:6.1.2+dfsg-2ubuntu0.1

Ubuntu 16.04 ESM:
libgmp-dev 2:6.1.0+dfsg-2ubuntu0.1~esm1
libgmp10 2:6.1.0+dfsg-2ubuntu0.1~esm1
libgmpxx4ldbl 2:6.1.0+dfsg-2ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5672-1

CVE-2021-43618

Severity
critical
Lowest
Low
Medium
High
Critical

October 12, 2022

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu 16.04 ubuntu 20.04 gmp ubuntu 18.04

Package Information

https://launchpad.net/ubuntu/+source/gmp/2:6.2.0+dfsg-4ubuntu0.1
https://launchpad.net/ubuntu/+source/gmp/2:6.1.2+dfsg-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.