CVE-2021-3570 Memory corruption in linuxptp
A missing length check in the ptp4l program allows remote attackers to cause information leaks, crashes, or potential code execution via crafted PTP messages.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-3570?
CVE-2021-3570 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 9 Jul 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.
Which versions are affected by CVE-2021-3570?
It affects 7 products.
Linux distribution packages (40)
linuxptp Red Hat:enterprise_linux:7::client | All versions | 0:2.0-2.el7_9.1 |
linuxptp-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:2.0-2.el7_9.1 |
linuxptp Red Hat:enterprise_linux:7::server | All versions | 0:2.0-2.el7_9.1 |
linuxptp-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:2.0-2.el7_9.1 |
linuxptp Red Hat:enterprise_linux:7::workstation | All versions | 0:2.0-2.el7_9.1 |
linuxptp-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:2.0-2.el7_9.1 |
linuxptp Red Hat:enterprise_linux:8::appstream | All versions | 0:2.0-5.el8_4.1 |
linuxptp-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:2.0-5.el8_4.1 |
linuxptp-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:2.0-5.el8_4.1 |
linuxptp Red Hat:rhel_eus:8.1::appstream | All versions | 0:2.0-4.el8_1.1 |
linuxptp-debuginfo Red Hat:rhel_eus:8.1::appstream | All versions | 0:2.0-4.el8_1.1 |
linuxptp-debugsource Red Hat:rhel_eus:8.1::appstream | All versions | 0:2.0-4.el8_1.1 |
linuxptp Red Hat:rhel_eus:8.2::appstream | All versions | 0:2.0-4.el8_2.1 |
linuxptp-debuginfo Red Hat:rhel_eus:8.2::appstream | All versions | 0:2.0-4.el8_2.1 |
linuxptp-debugsource Red Hat:rhel_eus:8.2::appstream | All versions | 0:2.0-4.el8_2.1 |
linuxptp Rocky Linux:8 | All versions | 0:2.0-5.el8_4.1 |
linuxptp SUSE:Enterprise Storage 6 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:HPE Helion OpenStack 8 | All versions | 1.4-15.3.1 |
linuxptp SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise High Performance Computing 15-ESPOS | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise High Performance Computing 15-LTSS | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Module for Server Applications 15 SP2 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Module for Server Applications 15 SP3 | All versions | 3.1.1-3.3.1 |
linuxptp SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 1.4-15.3.1 |
linuxptp SUSE:Linux Enterprise Server 12 SP3-BCL | All versions | 1.4-15.3.1 |
linuxptp SUSE:Linux Enterprise Server 12 SP3-LTSS | All versions | 1.4-15.3.1 |
linuxptp SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 1.4-15.3.1 |
linuxptp SUSE:Linux Enterprise Server 12 SP5 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Server 15 SP1-BCL | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Server 15 SP1-LTSS | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Server 15-LTSS | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 1.4-15.3.1 |
linuxptp SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 1.4-15.3.1 |
linuxptp SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Server for SAP Applications 15 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Manager Proxy 4.0 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Manager Retail Branch Server 4.0 | All versions | 1.8+git65.g303b08c-3.3.1 |
linuxptp SUSE:Manager Server 4.0 | All versions | 1.8+git65.g303b08c-3.3.1 |
Products include Debian Debian Linux, Fedoraproject Fedora, Linuxptp Project Linuxptp, Redhat Enterprise Linux, Redhat Enterprise Linux Aus, Redhat Enterprise Linux Eus and 1 more.
How do I fix CVE-2021-3570?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-3570 being exploited?
There is no known exploitation of CVE-2021-3570 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2021-3570, DLA-2723-1, DSA-4938-1, GHSA-rwc4-5qx3-qg4w, OESA-2021-1368, RHSA-2021:2657 and 12 more.