CVE-2021-43618: Buffer Overflow
Published Nov 15, 2021
·Updated
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
Affected Software
27 affected componentsFixes available
gmplib GMP<=6.2.1
Debian Debian Linux=9.0
NetApp Active Iq Unified Manager Vmware Vsphere
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H410s Firmware
NetApp H410s
NetApp H410c Firmware
NetApp H410c
redhat/gmp<6.2.1
6.2.1
IBM Business Automation Insights<=25.0.0
IBM Business Automation Insights<=24.0.1
IBM Business Automation Insights<=24.0.0
Remediation
Patch Available
Event History
Nov 15, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Nov 19, 2021
Data Sourced
via Red Hat·01:41 PM
DescriptionSeverityAffected Software
Nov 3, 2025
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-43618?
CVE-2021-43618 is classified as a denial of service vulnerability due to its potential to cause segmentation faults.
2
How do I fix CVE-2021-43618?
To fix CVE-2021-43618, upgrade to GMP version 6.2.1 or higher.
3
Which software is affected by CVE-2021-43618?
CVE-2021-43618 affects GNU Multiple Precision Arithmetic Library (GMP) versions up to 6.2.1 and specific versions of IBM QRadar SIEM as well as others.
4
Can CVE-2021-43618 be exploited on 64-bit platforms?
CVE-2021-43618 primarily affects 32-bit platforms, making them more susceptible to exploitation.
5
What type of attack is associated with CVE-2021-43618?
CVE-2021-43618 is associated with a denial of service attack through crafted inputs that lead to buffer overflows.