{"id":"CVE-2021-43618","aliases":["ALPINE-CVE-2021-43618","ALSA-2023:6661","ALSA-2024:3214","AZL-6444","BELL-CVE-2021-43618","CLSA-2024-1711477070","CLSA-2025-1745271805","CLSA-2026-1784645095","DEBIAN-CVE-2021-43618","DLA-2837-1","EUVD-2021-30531","GHSA-mfg4-w44m-wr4g","JLSEC-2026-1168","MGASA-2021-0544","OESA-2021-1460","RHSA-2023:6661","RHSA-2024:1102","RHSA-2024:1412","RHSA-2024:3214","RLSA-2023:6661","SUSE-SU-2021:3878-1","SUSE-SU-2021:3946-1","UBUNTU-CVE-2021-43618","USN-5672-1","USN-5672-2","openSUSE-SU-2021:1569-1","openSUSE-SU-2021:3946-1","openSUSE-SU-2024:11636-1"],"status":"published","title":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer...","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.04464,"percentile":0.91561,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2021-11-15T00:00:00Z","modified":"2026-10-29T11:31:57Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gmp","fixed_in":["6.2.1-r1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gmp","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gmp-c++","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gmp-devel","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gmp","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gmp-c++","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gmp-devel","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gmp","fixed_in":["6.2.1-2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gmp","fixed_in":["1:6.0.0-15.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gmp-devel","fixed_in":["1:6.0.0-15.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gmp-static","fixed_in":["1:6.0.0-15.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp","fixed_in":["1:6.2.0-10.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp-c++","fixed_in":["1:6.2.0-10.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp-devel","fixed_in":["1:6.2.0-10.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp-static","fixed_in":["1:6.2.0-10.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gmp","fixed_in":["1:6.0.0-15.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gmp-devel","fixed_in":["1:6.0.0-15.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gmp-static","fixed_in":["1:6.0.0-15.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gmp","fixed_in":["2:6.2.1+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gmp","fixed_in":["2:6.2.1+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gmp","fixed_in":["2:6.2.1+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"gmp","fixed_in":["2:6.1.2+dfsg-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"GMP_jll","fixed_in":["6.3.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"gmp","fixed_in":["6.2.1-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gmp","fixed_in":["6.2.0-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"gmp","fixed_in":["6.2.0-2.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-c++","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-c++-debuginfo","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-debuginfo","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-debugsource","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-devel","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp-c++-debuginfo","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp-debuginfo","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp-debugsource","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp","fixed_in":["1:6.1.2-11.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-c++","fixed_in":["1:6.1.2-11.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-c++-debuginfo","fixed_in":["1:6.1.2-11.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-debuginfo","fixed_in":["1:6.1.2-11.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-debugsource","fixed_in":["1:6.1.2-11.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-devel","fixed_in":["1:6.1.2-11.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp","fixed_in":["1:6.1.2-11.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-c++","fixed_in":["1:6.1.2-11.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-c++-debuginfo","fixed_in":["1:6.1.2-11.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-debuginfo","fixed_in":["1:6.1.2-11.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-debugsource","fixed_in":["1:6.1.2-11.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-devel","fixed_in":["1:6.1.2-11.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-c++","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-c++-debuginfo","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-debuginfo","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-debugsource","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-devel","fixed_in":["1:6.1.2-11.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"gmp","fixed_in":["1:6.2.0-13.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gmp","fixed_in":["5.1.3-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gmp","fixed_in":["5.1.3-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gmp","fixed_in":["5.1.3-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"gmp","fixed_in":["6.1.2-4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gmp","fixed_in":["6.1.2-4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"gmp","fixed_in":["6.1.2-4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"gmp","fixed_in":["6.1.2-4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"gmp","fixed_in":["6.1.2-4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"gmp","fixed_in":["6.1.2-4.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gmp","fixed_in":["2:5.1.3+dfsg-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gmp","fixed_in":["2:6.1.0+dfsg-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"gmp","fixed_in":["2:6.1.2+dfsg-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gmp","fixed_in":["2:6.2.0+dfsg-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"gmp","fixed_in":["6.1.2-lp152.6.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"gmp","fixed_in":["6.1.2-4.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gmp","fixed_in":["6.2.1-4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gmp-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gmp-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0-15.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0-15.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gmp-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0-15.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-10.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-10.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-10.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gmp-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-10.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0-15.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0-15.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gmp-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.0-15.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.2.1+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.2.1+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.2.1+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.1.2+dfsg-1+deb9u1"}]}],"versions":["2:6.1.2+dfsg-1"]},{"source":"osv","ecosystem":"Julia","package":"GCCBootstrap_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Julia","package":"GMP_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.3.0+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"LibStdCxx_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-2.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.1.2-11.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.2.0-13.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.3-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-4.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.1.3+dfsg-1ubuntu1+esm1"}]}],"versions":["2:5.1.2+dfsg-2ubuntu1","2:5.1.2+dfsg-3ubuntu2","2:5.1.2+dfsg-3ubuntu3","2:5.1.3+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.1.0+dfsg-2ubuntu0.1~esm1"}]}],"versions":["2:6.0.0+dfsg-7","2:6.1.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.1.2+dfsg-2ubuntu0.1"}]}],"versions":["2:6.1.2+dfsg-1","2:6.1.2+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.2.0+dfsg-4ubuntu0.1"}]}],"versions":["2:6.1.2+dfsg-4","2:6.2.0+dfsg-3","2:6.2.0+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.1.0+dfsg-2ubuntu0.1~esm1"}]}],"versions":["2:6.0.0+dfsg-7","2:6.1.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.1.2+dfsg-2ubuntu0.1"}]}],"versions":["2:6.1.2+dfsg-1","2:6.1.2+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.2.0+dfsg-4ubuntu0.1"}]}],"versions":["2:6.1.2+dfsg-4","2:6.2.0+dfsg-3","2:6.2.0+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.1.3+dfsg-1ubuntu1+esm1"}]}],"versions":["2:5.1.2+dfsg-2ubuntu1","2:5.1.2+dfsg-3ubuntu2","2:5.1.2+dfsg-3ubuntu3","2:5.1.3+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-lp152.6.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-4.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-4.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gmplib","product":"gmp"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html","tags":["x_transferred","Exploit","Third Party Advisory","evidence","web","article","report"]},{"url":"https://bugs.debian.org/994405","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","web","article"]},{"url":"https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e","tags":["x_transferred","Patch","Third Party Advisory","fix","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00001.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/10/13/3","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/8","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20221111-0001/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202309-13","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43618","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221111-0001"},{"url":"https://github.com/advisories/GHSA-mfg4-w44m-wr4g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-43618","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6661","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43618","tags":["report"]},{"url":"https://bugzilla.redhat.com/2024904","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6661.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3214","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3214.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-43618","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1711477070.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745271805.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1784645095.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-43618","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0544.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29723","tags":["report"]},{"url":"https://www.debian.org/lts/security/2021/dla-2837","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1460","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024904","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6661.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43618","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1102","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1102.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1412","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1412.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3214.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6661","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213878-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192717","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43618","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213946-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-43618","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5672-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5672-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B57NW5VYILA46TZMVY3NWIAZTPRTGTXJ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/R45QGO5IGOQU6FDWBSNSZHXXXTFJHN5O/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-43618","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T00:00:00Z","modified":"2026-10-14T11:53:55.056Z","updated_at":"2026-11-02T14:32:57.033395Z"}],"euvd":[{"id":"EUVD-2021-30531","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T00:00:00Z","modified":"2026-10-14T11:53:55Z","updated_at":"2026-11-02T17:27:15.969628Z"}],"ghsa":[{"id":"GHSA-mfg4-w44m-wr4g","title":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer...","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2022-05-24T19:20:40Z","modified":"2026-10-14T12:32:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-43618","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T04:15:06.873Z","modified":"2026-10-14T12:17:16.35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:00.984108Z"}],"osv":[{"id":"ALPINE-CVE-2021-43618","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T04:15:06.873Z","modified":"2026-10-23T17:17:56.22342094Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6444","title":"CVE-2021-43618 affecting package gmp for versions less than 6.2.1-2","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T04:15:06Z","modified":"2026-04-21T04:32:25.108758Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"BELL-CVE-2021-43618","title":"CVE-2021-43618 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:31.369982Z","modified":"2026-01-26T10:04:56.069833Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-43618","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T04:15:06.873Z","modified":"2026-04-16T04:39:37.703884287Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.877444Z"},{"id":"DEBIAN-CVE-2021-43618","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T04:15:06.873Z","modified":"2026-10-15T09:47:35.98959031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"JLSEC-2026-1168","title":"GMP has an integer overflow with crafted inputs on 32-bit builds in `int_raw.c`, leading to buffer overflow","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an `mpz/inp_raw.c` integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2026-08-05T21:11:23.872Z","modified":"2026-08-05T21:15:04.299276026Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2021-1460","title":"gmp security update","description":"A GNU multiple precision arithmetic library.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.(CVE-2021-43618)","status":"published","published":"2021-12-10T11:04:44Z","modified":"2026-08-18T01:16:14.582113955Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2023:6661","title":"Red Hat Security Advisory: gmp security and enhancement update","status":"published","published":"2024-09-16T12:13:43Z","modified":"2026-10-15T10:05:54Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:1102","title":"Red Hat Security Advisory: gmp security update","status":"published","published":"2024-09-16T12:13:53Z","modified":"2026-10-15T10:07:11Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1412","title":"Red Hat Security Advisory: gmp update","status":"published","published":"2024-09-16T12:14:02Z","modified":"2026-10-15T10:07:23Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:3214","title":"Red Hat Security Advisory: gmp security update","status":"published","published":"2024-09-16T12:14:31Z","modified":"2026-10-15T10:07:52Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2023:6661","title":"Low: gmp security and enhancement update","description":"The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. \n\nSecurity Fix(es):\n\n* gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","status":"published","published":"2026-06-25T12:03:37.665962Z","modified":"2026-06-25T12:30:05.596402826Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2021-43618","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.","status":"published","published":"2021-11-15T04:15:00Z","modified":"2026-04-22T13:02:20.738375Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2023:6661","title":"Low: gmp security and enhancement update","description":"The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. \n\nSecurity Fix(es):\n\n* gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:57.85894708Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:3214","title":"Moderate: gmp security update","description":"The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. \n\nSecurity Fix(es):\n\n* gmp: Integer overflow and resultant buffer overflow via crafted input (CVE-2021-43618)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:26.310835865Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2024-1711477070","title":"gmp: Fix of CVE-2021-43618","description":"- CVE-2021-43618: gmp security and enhancement update","status":"published","published":"2024-03-26T18:17:53Z","modified":"2026-06-01T00:33:17.356252794Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1745271805","title":"gmp: Fix of CVE-2021-43618","description":"- CVE-2021-43618: fix integer overflow and buffer overflow in mpz/inp_raw.c to\n  prevent segmentation fault on 32-bit platforms","status":"published","published":"2025-04-21T21:43:30Z","modified":"2026-06-01T00:30:41.464312263Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1784645095","title":"gmp: Fix of CVE-2021-43618","description":"- CVE-2021-43618: gmp security and enhancement update","status":"published","published":"2026-07-21T14:45:21Z","modified":"2026-10-26T09:31:55.710141141Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"DLA-2837-1","title":"gmp - security update","status":"published","published":"2021-12-02T00:00:00Z","modified":"2026-03-09T01:21:22.514631Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2021-0544","title":"Updated gmp packages fix security vulnerability","description":"Integer overflow in mpz/inp_raw.c and resultant buffer overflow via\ncrafted input, leading to a segmentation fault on 32-bit platforms.\n","status":"published","published":"2021-12-08T20:04:18Z","modified":"2026-04-16T04:44:10.507330936Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1569-1","title":"Security update for gmp","description":"This update for gmp fixes the following issues:\n    \n- CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inp_raw.c (bsc#1192717).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-12-10T17:06:19Z","modified":"2025-05-07T18:13:20.911271Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3946-1","title":"Security update for gmp","description":"This update for gmp fixes the following issues:\n    \n- CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inp_raw.c (bsc#1192717).\n","status":"published","published":"2021-12-06T13:58:01Z","modified":"2026-02-04T03:15:27.951843Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11636-1","title":"gmp-devel-32bit-6.2.1-4.1 on GA media","description":"These are all security issues fixed in the gmp-devel-32bit-6.2.1-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:25:17.192831Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:3878-1","title":"Security update for gmp","description":"This update for gmp fixes the following issues:\n\n- CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inp_raw.c (bsc#1192717).\n","status":"published","published":"2021-12-02T08:14:01Z","modified":"2026-02-04T03:18:21.699331Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3946-1","title":"Security update for gmp","description":"This update for gmp fixes the following issues:\n    \n- CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inp_raw.c (bsc#1192717).\n","status":"published","published":"2021-12-06T13:58:05Z","modified":"2026-02-04T03:59:10.929481Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5672-1","title":"GMP vulnerability","description":"It was discovered that GMP did not properly manage memory\non 32-bit platforms when processing a specially crafted\ninput. An attacker could possibly use this issue to cause\napplications using GMP to crash, resulting in a denial of\nservice.\n","status":"published","published":"2022-10-12T12:54:58Z","modified":"2026-06-25T13:31:26.915109303Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5672-2","title":"gmp vulnerability","description":"USN-5672-1 fixed a vulnerability in GMP. This update provides\nthe corresponsing update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that GMP did not properly manage memory\n on 32-bit platforms when processing a specially crafted\n input. An attacker could possibly use this issue to cause\n applications using GMP to crash, resulting in a denial of\n service.\n","status":"published","published":"2023-03-06T14:27:26Z","modified":"2026-06-29T13:49:42.078611961Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}