https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html

https://bugs.debian.org/994405

https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e

[debian-lts-announce] 20211202 [SECURITY] [DLA 2837-1] gmp security update

[oss-security] 20221013 Re: sagemath denial of service with abort() in gmp: overflow in mpz type

20221016 Re: over 2000 packages depend on abort()ing libgmp

https://security.netapp.com/advisory/ntap-20221111-0001/

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-033 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gmp installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-43618 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the gmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-177 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5672-1 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the gmp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gmp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3946-1 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3946-1 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3878-1 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2837 advisory.

  - GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and     resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
    (CVE-2021-43618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
173082	Amazon Linux 2023 : gmp, gmp-c++, gmp-devel (ALAS2023-2023-033)	Nessus	Amazon Linux Local Security Checks	high
172915	CBL Mariner 2.0 Security Update: gmp (CVE-2021-43618)	Nessus	MarinerOS Local Security Checks	high
170833	EulerOS Virtualization 3.0.2.2 : gmp (EulerOS-SA-2023-1255)	Nessus	Huawei Local Security Checks	high
169664	EulerOS Virtualization 3.0.2.6 : gmp (EulerOS-SA-2023-1069)	Nessus	Huawei Local Security Checks	high
167034	Amazon Linux 2022 : (ALAS2022-2022-177)	Nessus	Amazon Linux Local Security Checks	high
166088	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : GMP vulnerability (USN-5672-1)	Nessus	Ubuntu Local Security Checks	high
165889	EulerOS Virtualization 3.0.6.6 : gmp (EulerOS-SA-2022-2502)	Nessus	Huawei Local Security Checks	high
163407	EulerOS Virtualization 3.0.2.0 : gmp (EulerOS-SA-2022-1683)	Nessus	Huawei Local Security Checks	high
159858	EulerOS Virtualization 2.10.1 : gmp (EulerOS-SA-2022-1372)	Nessus	Huawei Local Security Checks	high
159841	EulerOS Virtualization 2.10.0 : gmp (EulerOS-SA-2022-1398)	Nessus	Huawei Local Security Checks	high
158553	EulerOS 2.0 SP9 : gmp (EulerOS-SA-2022-1288)	Nessus	Huawei Local Security Checks	high
158539	EulerOS 2.0 SP9 : gmp (EulerOS-SA-2022-1304)	Nessus	Huawei Local Security Checks	high
158469	EulerOS 2.0 SP5 : gmp (EulerOS-SA-2022-1268)	Nessus	Huawei Local Security Checks	high
158401	EulerOS 2.0 SP10 : gmp (EulerOS-SA-2022-1253)	Nessus	Huawei Local Security Checks	high
158386	EulerOS 2.0 SP10 : gmp (EulerOS-SA-2022-1241)	Nessus	Huawei Local Security Checks	high
158299	EulerOS 2.0 SP3 : gmp (EulerOS-SA-2022-1165)	Nessus	Huawei Local Security Checks	high
155906	SUSE SLED15 / SLES15 Security Update : gmp (SUSE-SU-2021:3946-1)	Nessus	SuSE Local Security Checks	high
155881	openSUSE 15 Security Update : gmp (openSUSE-SU-2021:3946-1)	Nessus	SuSE Local Security Checks	high
155828	SUSE SLED12 / SLES12 Security Update : gmp (SUSE-SU-2021:3878-1)	Nessus	SuSE Local Security Checks	high
155822	Debian DLA-2837-1 : gmp - LTS security update	Nessus	Debian Local Security Checks	high

CVE-2021-43618

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high