INFSA-2023:6661: gmp security update

Information about definition

Identificator: INFSA-2023:6661

Type: security

Release date: 2025-03-05 17:25:15 UTC

Information about package

The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers.

Vulnerabilities description

  • CVE-2021-43618

    GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

Severity level

CVE Score CVSS 2.0 Score CVSS 3.x Score CVSS 4.0
no information 6.2 no information
Critical, important, moderate, low

Updated packages

loader icon Preparing to download...
Architecture: Download