CVE catalog

CVE-2021-3570

linuxptp: CVE-2021-3570

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.96% · Oct 25, 2026

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlinuxptpsid4.4-1fixed
Debianlinuxptpforky4.4-1fixed
Debianlinuxptptrixie4.2-1fixed
Debianlinuxptpbookworm3.1.1-4fixed
Ubuntulinuxptppro1.5-1vulnerable
Ubuntulinuxptppro1.5-2vulnerable
Ubuntulinuxptppro1.6-1vulnerable
Ubuntulinuxptppro1.6-1ubuntu0.1~esm1fixed
Ubuntulinuxptp18.041.8-1vulnerable
Ubuntulinuxptp18.041.8-1ubuntu0.1fixed
Ubuntulinuxptp20.041.9.2-1vulnerable
Ubuntulinuxptp20.041.9.2-1ubuntu0.1fixed
Suselinuxptplinux enterprise server 12 sp51.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise server for sap applications 12 sp51.8+git65.g303b08c-3.3.1fixed
Opensuselinuxptpleap 15.33.1.1-3.3.1fixed
Ubuntulinuxptppro1.5-1vulnerable
Ubuntulinuxptppro1.5-2vulnerable
Ubuntulinuxptppro1.6-1vulnerable
Ubuntulinuxptppro1.6-1ubuntu0.1~esm1fixed
Ubuntulinuxptp18.041.8-1vulnerable
Ubuntulinuxptp18.041.8-1ubuntu0.1fixed
Ubuntulinuxptp20.041.9.2-1vulnerable
Ubuntulinuxptp20.041.9.2-1ubuntu0.1fixed
Opensuselinuxptpleap 15.21.8+git65.g303b08c-lp152.4.3.1fixed
Suselinuxptplinux enterprise module for server applications 15 sp33.1.1-3.3.1fixed
Suselinuxptphpe helion openstack 81.4-15.3.1fixed
Suselinuxptpopenstack cloud 81.4-15.3.1fixed
Suselinuxptpopenstack cloud 91.4-15.3.1fixed
Suselinuxptpopenstack cloud crowbar 81.4-15.3.1fixed
Suselinuxptpopenstack cloud crowbar 91.4-15.3.1fixed
Suselinuxptplinux enterprise server for sap applications 12 sp31.4-15.3.1fixed
Suselinuxptplinux enterprise server for sap applications 12 sp41.4-15.3.1fixed
Suselinuxptplinux enterprise server 12 sp2-bcl1.4-15.3.1fixed
Suselinuxptplinux enterprise server 12 sp3-ltss1.4-15.3.1fixed
Suselinuxptplinux enterprise server 12 sp3-bcl1.4-15.3.1fixed
Suselinuxptplinux enterprise server 12 sp4-ltss1.4-15.3.1fixed
Suselinuxptplinux enterprise module for server applications 15 sp21.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise high performance computing 15-espos1.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise high performance computing 15-ltss1.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise high performance computing 15 sp1-espos1.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise high performance computing 15 sp1-ltss1.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise server 15-ltss1.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise server 15 sp1-bcl1.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise server 15 sp1-ltss1.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise server for sap applications 151.8+git65.g303b08c-3.3.1fixed
Suselinuxptplinux enterprise server for sap applications 15 sp11.8+git65.g303b08c-3.3.1fixed
Suselinuxptpmanager proxy 4.01.8+git65.g303b08c-3.3.1fixed
Suselinuxptpmanager retail branch server 4.01.8+git65.g303b08c-3.3.1fixed
Suselinuxptpmanager server 4.01.8+git65.g303b08c-3.3.1fixed
Suselinuxptpenterprise storage 61.8+git65.g303b08c-3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlinuxptpsourcesid3.1-2.1not yet assignedNot reported[990748]
Debianlinuxptpsourceforky3.1-2.1not yet assignedNot reported[990748]
Debianlinuxptpsourcetrixie3.1-2.1not yet assignedNot reported[990748]
Debianlinuxptpsourcebookworm3.1-2.1not yet assignedNot reported[990748]
Ubuntulinuxptpdebpro1.6-1ubuntu0.1~esm1Not reportedUSN-6097-1Not reported
Ubuntulinuxptpdeb18.041.8-1ubuntu0.1Not reportedUSN-6097-1Not reported
Ubuntulinuxptpdeb20.041.9.2-1ubuntu0.1Not reportedUSN-6097-1Not reported
Suselinuxptprpmlinux enterprise server 12 sp51.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2545-1Not reported
Suselinuxptprpmlinux enterprise server for sap applications 12 sp51.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2545-1Not reported
Opensuselinuxptprpmleap 15.33.1.1-3.3.1Not reportedOPENSUSE-SU-2021:3202-1Not reported
Ubuntulinuxptpdebpro1.6-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2021-3570Not reported
Ubuntulinuxptpdeb18.041.8-1ubuntu0.1Not reportedUBUNTU-CVE-2021-3570Not reported
Ubuntulinuxptpdeb20.041.9.2-1ubuntu0.1Not reportedUBUNTU-CVE-2021-3570Not reported
Opensuselinuxptprpmleap 15.21.8+git65.g303b08c-lp152.4.3.1Not reportedOPENSUSE-SU-2021:1102-1Not reported
Suselinuxptprpmlinux enterprise module for server applications 15 sp33.1.1-3.3.1Not reportedSUSE-SU-2021:3202-1Not reported
Suselinuxptprpmhpe helion openstack 81.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmopenstack cloud 81.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmopenstack cloud 91.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmopenstack cloud crowbar 81.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmopenstack cloud crowbar 91.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmlinux enterprise server for sap applications 12 sp31.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmlinux enterprise server for sap applications 12 sp41.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmlinux enterprise server 12 sp2-bcl1.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmlinux enterprise server 12 sp3-ltss1.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmlinux enterprise server 12 sp3-bcl1.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmlinux enterprise server 12 sp4-ltss1.4-15.3.1Not reportedSUSE-SU-2021:2443-1Not reported
Suselinuxptprpmlinux enterprise module for server applications 15 sp21.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise high performance computing 15-espos1.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise high performance computing 15-ltss1.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise high performance computing 15 sp1-espos1.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise high performance computing 15 sp1-ltss1.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise server 15-ltss1.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise server 15 sp1-bcl1.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise server 15 sp1-ltss1.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise server for sap applications 151.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmlinux enterprise server for sap applications 15 sp11.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmmanager proxy 4.01.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmmanager retail branch server 4.01.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmmanager server 4.01.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported
Suselinuxptprpmenterprise storage 61.8+git65.g303b08c-3.3.1Not reportedSUSE-SU-2021:2472-1Not reported

[Debian bug #990748]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [linuxptp]Fixed

    Source package: [linuxptp]

    Details (2)

    • 3.1.1-4+b2 · amd64 · bookworm

      Fixed · Fixed: 3.1-2.1

      dsa · linuxptp · debian · bookworm; dsa · linuxptp · debian · 12

    • 3.1.1-4+b2 · arm64 · bookworm

      Fixed · Fixed: 3.1-2.1

      dsa · linuxptp · debian · bookworm; dsa · linuxptp · debian · 12

[Debian 13 (Trixie)]

  • [linuxptp]Fixed

    Source package: [linuxptp]

    Details (2)

    • 4.2-1 · amd64 · trixie

      Fixed · Fixed: 3.1-2.1

      dsa · linuxptp · debian · 13

    • 4.2-1+b1 · arm64 · trixie

      Fixed · Fixed: 3.1-2.1

      dsa · linuxptp · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]