CVE-2021-43618

gmp: The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational...

CVE-2021-43618 is fixed in 9 products on 1 platform, first by libgmp10 2:6.1.2+dfsg-2ubuntu0.1, released November 14, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0446
91st percentile

The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. Security Fix(es): * gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
gmp · Debian 12.15 (bookworm) 2:6.2.1+dfsg-3 DEBIAN-CVE-2021-43618 Nov 15, 2021
gmp · Debian 13.5 (trixie) 2:6.2.1+dfsg-3 DEBIAN-CVE-2021-43618 Nov 15, 2021
gmp · Debian 14 2:6.2.1+dfsg-3 DEBIAN-CVE-2021-43618 Nov 15, 2021
gmp · RHEL 8 1:6.1.2-11.el8 RHSA-2024:3214 May 22, 2024
gmp · RHEL 9 1:6.2.0-13.el9 RHSA-2023:6661 Nov 7, 2023
gmp · almalinux 8 1:6.1.2-11.el8 ALSA-2024:3214 May 22, 2024
gmp · almalinux 9 1:6.2.0-13.el9 ALSA-2023:6661 Nov 7, 2023
gmp · amzn 2023 1:6.2.1-2.amzn2023.0.2 ALAS2023-2023-033 Feb 17, 2023
gmp · ol 8 1:6.1.2-11.el8 ELSA-2024-3214 May 23, 2024
gmp · ol 9 1:6.2.0-13.el9 ELSA-2023-6661 Nov 11, 2023
gmp · rocky 9 1:6.2.0-13.el9 RLSA-2023:6661 Jun 25, 2026
gmp-c++ · RHEL 8 1:6.1.2-11.el8 RHSA-2024:3214 May 22, 2024
gmp-c++ · RHEL 9 1:6.2.0-13.el9 RHSA-2023:6661 Nov 7, 2023
gmp-c++ · almalinux 8 1:6.1.2-11.el8 ALSA-2024:3214 May 22, 2024
gmp-c++ · almalinux 9 1:6.2.0-13.el9 ALSA-2023:6661 Nov 7, 2023
gmp-c++ · amzn 2023 1:6.2.1-2.amzn2023.0.2 ALAS2023-2023-033 Feb 17, 2023
gmp-c++ · ol 8 1:6.1.2-11.el8 ELSA-2024-3214 May 23, 2024
gmp-c++ · ol 9 1:6.2.0-13.el9 ELSA-2023-6661 Nov 11, 2023
gmp-c++-debuginfo · amzn 2023 1:6.2.1-2.amzn2023.0.2 ALAS2023-2023-033 Feb 17, 2023
gmp-debuginfo · amzn 2023 1:6.2.1-2.amzn2023.0.2 ALAS2023-2023-033 Feb 17, 2023
gmp-debugsource · amzn 2023 1:6.2.1-2.amzn2023.0.2 ALAS2023-2023-033 Feb 17, 2023
gmp-devel · RHEL 8 1:6.1.2-11.el8 RHSA-2024:3214 May 22, 2024
gmp-devel · RHEL 9 1:6.2.0-13.el9 RHSA-2023:6661 Nov 7, 2023
gmp-devel · almalinux 8 1:6.1.2-11.el8 ALSA-2024:3214 May 22, 2024
gmp-devel · almalinux 9 1:6.2.0-13.el9 ALSA-2023:6661 Nov 7, 2023
gmp-devel · amzn 2023 1:6.2.1-2.amzn2023.0.2 ALAS2023-2023-033 Feb 17, 2023
gmp-devel · ol 8 1:6.1.2-11.el8 ELSA-2024-3214 May 23, 2024
gmp-devel · ol 9 1:6.2.0-13.el9 ELSA-2023-6661 Nov 11, 2023
gmp-static · amzn 2023 1:6.2.1-2.amzn2023.0.2 ALAS2023-2023-033 Feb 17, 2023
libgmp10 · Ubuntu 18.04.6 LTS (bionic) 2:6.1.2+dfsg-2ubuntu0.1 libgmp10 2:6.1.2+dfsg-2ubuntu0.1 Nov 14, 2021
libgmp10 · Ubuntu 20.04 LTS (focal) 2:6.2.0+dfsg-4ubuntu0.1 libgmp10 2:6.2.0+dfsg-4ubuntu0.1 Nov 14, 2021
libgmpxx4ldbl · Ubuntu 18.04.6 LTS (bionic) 2:6.1.2+dfsg-2ubuntu0.1 libgmpxx4ldbl 2:6.1.2+dfsg-2ubuntu0.1 Nov 14, 2021
libgmpxx4ldbl · Ubuntu 20.04 LTS (focal) 2:6.2.0+dfsg-4ubuntu0.1 libgmpxx4ldbl 2:6.2.0+dfsg-4ubuntu0.1 Nov 14, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.