CVE-2021-3570CWE-119

A flaw was found in the ptp4l program of the linuxptp package

published July 9, 2021

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02955 · 87.1th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-07-09T10:33Z
EPSS history
Timeline
  • 09 JUL 10:33Z
    A flaw was found in the ptp4l program of the linuxptp package
    cvelistv5