CVE-2021-41043
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
- Record
CVE-2021-41043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
- Record
CVE-2021-41043- Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2021-28194 No score
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
- Record
EUVD-2021-28194- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hgc7-hm7p-p5cj No score
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
- Record
GHSA-hgc7-hm7p-p5cj- Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
- Record
CVE-2021-41043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-41043
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
- Record
DEBIAN-CVE-2021-41043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVRHSA-2024:0410
Red Hat Security Advisory: tcpdump security update
- Record
RHSA-2024:0410- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0571
Red Hat Security Advisory: tcpdump security update
- Record
RHSA-2024:0571- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0769
Red Hat Security Advisory: tcpdump security update
- Record
RHSA-2024:0769- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:1090
Red Hat Security Advisory: tcpdump security update
- Record
RHSA-2024:1090- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2211
Red Hat Security Advisory: tcpdump security update
- Record
RHSA-2024:2211- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2024:2211
Moderate: tcpdump security update
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
Security Fix(es):
- tcpslice: use-after-free in extract_slice() (CVE-2021-41043)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.
- Record
RLSA-2024:2211- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-41043
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
- Record
UBUNTU-CVE-2021-41043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2024:0769 No score
Moderate: tcpdump security update
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
Security Fix(es):
- tcpslice: use-after-free in extract_slice() (CVE-2021-41043)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:0769- Updated
- 2026-11-02
OSVALSA-2024:2211 No score
Moderate: tcpdump security update
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
Security Fix(es):
- tcpslice: use-after-free in extract_slice() (CVE-2021-41043)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2211- Updated
- 2026-11-02
OSVRLSA-2024:0769 No score
Moderate: tcpdump security update
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
Security Fix(es):
- tcpslice: use-after-free in extract_slice() (CVE-2021-41043)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:0769- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tcpdumpAlmaLinux:8 |
before 14:4.9.3-3.el8_9.1.alma.1 | 14:4.9.3-3.el8_9.1.alma.1 |
tcpdumpAlmaLinux:9 |
before 14:4.99.0-9.el9 | 14:4.99.0-9.el9 |
tcpsliceDebian:12 |
before 1.5-1 | 1.5-1 |
tcpsliceDebian:13 |
before 1.5-1 | 1.5-1 |
tcpsliceDebian:14 |
before 1.5-1 | 1.5-1 |
tcpdumpRed Hat:rhel_eus:8.6::appstream |
before 14:4.9.3-3.el8_6.1 | 14:4.9.3-3.el8_6.1 |
tcpdump-debuginfoRed Hat:rhel_eus:8.6::appstream |
before 14:4.9.3-3.el8_6.1 | 14:4.9.3-3.el8_6.1 |
tcpdump-debugsourceRed Hat:rhel_eus:8.6::appstream |
before 14:4.9.3-3.el8_6.1 | 14:4.9.3-3.el8_6.1 |
tcpdumpRed Hat:rhel_eus:8.8::appstream |
before 14:4.9.3-3.el8_8.1 | 14:4.9.3-3.el8_8.1 |
tcpdump-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 14:4.9.3-3.el8_8.1 | 14:4.9.3-3.el8_8.1 |
Show 20 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tcpdump-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 14:4.9.3-3.el8_8.1 | 14:4.9.3-3.el8_8.1 |
tcpdumpRed Hat:enterprise_linux:8::appstream |
before 14:4.9.3-3.el8_9.1 | 14:4.9.3-3.el8_9.1 |
tcpdump-debuginfoRed Hat:enterprise_linux:8::appstream |
before 14:4.9.3-3.el8_9.1 | 14:4.9.3-3.el8_9.1 |
tcpdump-debugsourceRed Hat:enterprise_linux:8::appstream |
before 14:4.9.3-3.el8_9.1 | 14:4.9.3-3.el8_9.1 |
tcpdumpRed Hat:rhel_eus:9.2::appstream |
before 14:4.99.0-6.el9_2.1 | 14:4.99.0-6.el9_2.1 |
tcpdump-debuginfoRed Hat:rhel_eus:9.2::appstream |
before 14:4.99.0-6.el9_2.1 | 14:4.99.0-6.el9_2.1 |
tcpdump-debugsourceRed Hat:rhel_eus:9.2::appstream |
before 14:4.99.0-6.el9_2.1 | 14:4.99.0-6.el9_2.1 |
tcpdumpRed Hat:enterprise_linux:9::appstream |
before 14:4.99.0-9.el9 | 14:4.99.0-9.el9 |
tcpdump-debuginfoRed Hat:enterprise_linux:9::appstream |
before 14:4.99.0-9.el9 | 14:4.99.0-9.el9 |
tcpdump-debugsourceRed Hat:enterprise_linux:9::appstream |
before 14:4.99.0-9.el9 | 14:4.99.0-9.el9 |
tcpdumpRocky Linux:8 |
before 4:4.9.3-3.el8_9.1 | 4:4.9.3-3.el8_9.1 |
tcpdumpRocky Linux:9 |
before 4:4.99.0-9.el9 | 4:4.99.0-9.el9 |
tcpsliceUbuntu:16.04:LTS |
All versions, plus listed versions 1.2a3-4 |
None known |
tcpsliceUbuntu:18.04:LTS |
All versions, plus listed versions 1.2a3-41.2a3-4build1 |
None known |
tcpsliceUbuntu:20.04:LTS |
All versions, plus listed versions 1.2a3-4build1 |
None known |
tcpsliceUbuntu:22.04:LTS |
All versions, plus listed versions 1.3-2 |
None known |
tcpsliceUbuntu:24.04:LTS |
All versions, plus listed versions 1.5-11.5-1build11.5-1build2 |
None known |
tcpsliceUbuntu:25.10 |
All versions, plus listed versions 1.8-1 |
None known |
tcpsliceUbuntu:26.10 |
All versions, plus listed versions 1.8-1build1 |
None known |
tcpsliceUbuntu:26.04:LTS |
All versions, plus listed versions 1.8-11.8-1build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-41043 is a medium vulnerability (CVSS 5.5) in Tcpdump Tcpslice, published January 5, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 60th percentile. Fixed in tcpdump 14:4.9.3-3.el8_9.1.alma.1.
References
github.com/the-tcpdump-group/tcpslice/issues/11
nvd.nist.gov/vuln/detail/CVE-2021-41043
access.redhat.com/errata/RHSA-2024:0769
bugzilla.redhat.com/2040392
Show 20 moreShow less
errata.almalinux.org/8/ALSA-2024-0769.html
security-tracker.debian.org/tracker/CVE-2021-41043
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0410.json
cve.org/CVERecord?id=CVE-2021-41043
errata.rockylinux.org/RLSA-2024:0769
ubuntu.com/security/CVE-2021-41043