Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Paul Zimmermann

Researcher fromINRIA
#32690of 53,632
7.8Total CVSS
Vulnerabilities · 1
PT-2021-7355
7.8
2021-09-15
Gnu · Gmp · CVE-2021-43618
**Name of the Vulnerable Software and Affected Versions** GNU Multiple Precision Arithmetic Library (GMP) versions through 6.2.1 **Description** The issue is related to an integer overflow and resultant buffer overflow in the mpz/inp raw.c component of the GNU Multiple Precision Arithmetic Library (GMP) on 32-bit platforms. This can be triggered by crafted input, leading to a segmentation fault. The vulnerability can be exploited by a remote attacker to cause a denial of service. **Recommendations** For GNU Multiple Precision Arithmetic Library (GMP) versions through 6.2.1, update to a version later than 6.2.1 to resolve the issue. As a temporary workaround, consider restricting the use of the mpz/inp raw.c component until a patch is available.