{"id":"CVE-2021-41043","aliases":["ALSA-2024:0769","ALSA-2024:2211","DEBIAN-CVE-2021-41043","EUVD-2021-28194","GHSA-hgc7-hm7p-p5cj","RHSA-2024:0410","RHSA-2024:0571","RHSA-2024:0769","RHSA-2024:1090","RHSA-2024:2211","RLSA-2024:0769","RLSA-2024:2211","UBUNTU-CVE-2021-41043"],"status":"published","title":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00931,"percentile":0.6112,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-01-05T11:34:51Z","modified":"2026-10-29T11:31:07Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"tcpdump","fixed_in":["14:4.9.3-3.el8_9.1.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"tcpdump","fixed_in":["14:4.99.0-9.el9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tcpslice","fixed_in":["1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tcpslice","fixed_in":["1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tcpslice","fixed_in":["1.5-1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"tcpdump","fixed_in":["14:4.9.3-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"tcpdump-debuginfo","fixed_in":["14:4.9.3-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"tcpdump-debugsource","fixed_in":["14:4.9.3-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"tcpdump","fixed_in":["14:4.9.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"tcpdump-debuginfo","fixed_in":["14:4.9.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"tcpdump-debugsource","fixed_in":["14:4.9.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump","fixed_in":["14:4.9.3-3.el8_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debuginfo","fixed_in":["14:4.9.3-3.el8_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debugsource","fixed_in":["14:4.9.3-3.el8_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"tcpdump","fixed_in":["14:4.99.0-6.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"tcpdump-debuginfo","fixed_in":["14:4.99.0-6.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"tcpdump-debugsource","fixed_in":["14:4.99.0-6.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tcpdump","fixed_in":["14:4.99.0-9.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tcpdump-debuginfo","fixed_in":["14:4.99.0-9.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tcpdump-debugsource","fixed_in":["14:4.99.0-9.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"tcpdump","fixed_in":["4:4.9.3-3.el8_9.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"tcpdump","fixed_in":["4:4.99.0-9.el9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_9.1.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.99.0-9.el9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-3.el8_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.99.0-6.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.99.0-6.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.99.0-6.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.99.0-9.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.99.0-9.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.99.0-9.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.3-3.el8_9.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.99.0-9.el9"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2a3-4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2a3-4","1.2a3-4build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2a3-4build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5-1","1.5-1build1","1.5-1build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tcpslice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8-1","1.8-1build1"]}],"products":[{"vendor":"tcpdump","product":"tcpslice"},{"vendor":"the tcpdump group","product":"tcpslice"}],"references":[{"url":"https://github.com/the-tcpdump-group/tcpslice/issues/11","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41043","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hgc7-hm7p-p5cj"},{"url":"https://access.redhat.com/errata/RHSA-2024:0769","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41043","tags":["report"]},{"url":"https://bugzilla.redhat.com/2040392","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0769.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2211","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2211.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41043","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0410","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040392","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0410.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41043","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0571","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0571.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0769.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1090","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1090.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2211.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0769","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2211","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-41043","tags":["report"]},{"url":"https://github.com/the-tcpdump-group/tcpslice/commit/030859fce9c77417de657b9bb29c0f78c2d68f4a","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-41043","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","status":"published","published":"2022-01-05T11:34:51Z","modified":"2024-08-04T02:59:31.062Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28194","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","status":"published","published":"2022-01-05T11:34:51Z","modified":"2024-08-04T02:59:31Z","updated_at":"2026-11-03T03:24:19.242491Z"}],"ghsa":[{"id":"GHSA-hgc7-hm7p-p5cj","title":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","status":"published","published":"2022-01-06T00:00:30Z","modified":"2023-02-03T05:04:07Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:53:29.32278Z"}],"nvd":[{"id":"CVE-2021-41043","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","status":"published","published":"2022-01-05T12:15:08.127Z","modified":"2026-06-17T04:07:47.923Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:03.418194Z"}],"osv":[{"id":"CVE-2021-41043","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","status":"published","published":"2022-01-05T12:15:08.127Z","modified":"2026-10-20T10:53:56.589612695Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-41043","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","status":"published","published":"2022-01-05T12:15:08.127Z","modified":"2026-10-23T18:03:28.302080801Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"RHSA-2024:0410","title":"Red Hat Security Advisory: tcpdump security update","status":"published","published":"2024-09-16T16:00:46Z","modified":"2026-03-18T11:34:23.343484Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0571","title":"Red Hat Security Advisory: tcpdump security update","status":"published","published":"2024-09-16T16:00:55Z","modified":"2026-03-18T11:34:31.524015Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0769","title":"Red Hat Security Advisory: tcpdump security update","status":"published","published":"2024-09-16T16:01:04Z","modified":"2026-03-18T11:34:39.639928Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:1090","title":"Red Hat Security Advisory: tcpdump security update","status":"published","published":"2024-09-16T16:01:14Z","modified":"2026-03-18T11:34:46.767776Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:2211","title":"Red Hat Security Advisory: tcpdump security update","status":"published","published":"2024-09-16T16:01:24Z","modified":"2026-03-18T11:33:41.025862Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:2211","title":"Moderate: tcpdump security update","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nSecurity Fix(es):\n\n* tcpslice: use-after-free in extract_slice() (CVE-2021-41043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:13:09.903227Z","modified":"2025-10-07T17:38:06.456413Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2021-41043","description":"Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.","status":"published","published":"2022-01-05T12:15:00Z","modified":"2026-10-17T12:56:01.337251871Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2024:0769","title":"Moderate: tcpdump security update","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nSecurity Fix(es):\n\n* tcpslice: use-after-free in extract_slice() (CVE-2021-41043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-02-12T00:00:00Z","modified":"2026-10-29T11:01:32.106127588Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:2211","title":"Moderate: tcpdump security update","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nSecurity Fix(es):\n\n* tcpslice: use-after-free in extract_slice() (CVE-2021-41043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:07.045525504Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"RLSA-2024:0769","title":"Moderate: tcpdump security update","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nSecurity Fix(es):\n\n* tcpslice: use-after-free in extract_slice() (CVE-2021-41043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-03-12T15:41:47.805432Z","modified":"2026-02-05T07:45:09.674726Z","updated_at":"2026-11-02T15:53:24.63379Z"}]}}