CVE-2021-3571CWE-119

A flaw was found in the ptp4l program of the linuxptp package

published July 9, 2021

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01895 · 79.5th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-07-09T10:33Z
EPSS history
Timeline
  • 09 JUL 10:33Z
    A flaw was found in the ptp4l program of the linuxptp package
    cvelistv5