CVE catalog

CVE-2021-43618

gmp: CVE-2021-43618

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Published: Nov 15, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 4.46% · Oct 25, 2026

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	gmp	sid	`2:6.3.0+dfsg-5`	fixed
Debian	gmp	forky	`2:6.3.0+dfsg-5`	fixed
Debian	gmp	trixie	`2:6.3.0+dfsg-3`	fixed
Debian	gmp	bookworm	`2:6.2.1+dfsg1-1.1`	fixed
Cpe	gmp	Not reported	Not reported	unknown
Cpe	debian_linux	Not reported	Not reported	unknown
Cpe	active_iq_unified_manager	Not reported	Not reported	unknown
Cpe	h300s_firmware	Not reported	Not reported	unknown
Cpe	h500s_firmware	Not reported	Not reported	unknown
Cpe	h700s_firmware	Not reported	Not reported	unknown
Cpe	h410s_firmware	Not reported	Not reported	unknown
Cpe	h410c_firmware	Not reported	Not reported	unknown
Alpine	gmp	3.12	`6.2.1-r1`	fixed
Alpine	gmp	3.13	`6.2.1-r1`	fixed
Alpine	gmp	3.14	`6.2.1-r1`	fixed
Alpine	gmp	3.15	`6.2.1-r1`	fixed
Alpine	gmp	3.16	`6.2.1-r1`	fixed
Alpine	gmp	3.17	`6.2.1-r1`	fixed
Alpine	gmp	3.18	`6.2.1-r1`	fixed
Alpine	gmp	3.19	`6.2.1-r1`	fixed
Alpine	gmp	3.20	`6.2.1-r1`	fixed
Alpine	gmp	3.21	`6.2.1-r1`	fixed
Alpine	gmp	3.22	`6.2.1-r1`	fixed
Alpine	gmp	3.23	`6.2.1-r1`	fixed
Alpine	gmp	3.24	`6.2.1-r1`	fixed
Ubuntu	gmp	pro	`2:5.1.2+dfsg-2ubuntu1`	vulnerable
Ubuntu	gmp	pro	`2:5.1.2+dfsg-3ubuntu2`	vulnerable
Ubuntu	gmp	pro	`2:5.1.2+dfsg-3ubuntu3`	vulnerable
Ubuntu	gmp	pro	`2:5.1.3+dfsg-1ubuntu1`	vulnerable
Ubuntu	gmp	pro	`2:5.1.3+dfsg-1ubuntu1+esm1`	fixed
Ubuntu	gmp	pro	`2:6.0.0+dfsg-7`	vulnerable
Ubuntu	gmp	pro	`2:6.1.0+dfsg-2`	vulnerable
Ubuntu	gmp	pro	`2:6.1.0+dfsg-2ubuntu0.1~esm1`	fixed
Ubuntu	gmp	18.04	`2:6.1.2+dfsg-1`	vulnerable
Ubuntu	gmp	18.04	`2:6.1.2+dfsg-2`	vulnerable
Ubuntu	gmp	18.04	`2:6.1.2+dfsg-2ubuntu0.1`	fixed
Ubuntu	gmp	20.04	`2:6.1.2+dfsg-4`	vulnerable
Ubuntu	gmp	20.04	`2:6.2.0+dfsg-3`	vulnerable
Ubuntu	gmp	20.04	`2:6.2.0+dfsg-4`	vulnerable
Ubuntu	gmp	20.04	`2:6.2.0+dfsg-4ubuntu0.1`	fixed
Ubuntu	gmp	pro	`2:6.0.0+dfsg-7`	vulnerable
Ubuntu	gmp	pro	`2:6.1.0+dfsg-2`	vulnerable
Ubuntu	gmp	pro	`2:6.1.0+dfsg-2ubuntu0.1~esm1`	fixed
Ubuntu	gmp	18.04	`2:6.1.2+dfsg-1`	vulnerable
Ubuntu	gmp	18.04	`2:6.1.2+dfsg-2`	vulnerable
Ubuntu	gmp	18.04	`2:6.1.2+dfsg-2ubuntu0.1`	fixed
Ubuntu	gmp	20.04	`2:6.1.2+dfsg-4`	vulnerable
Ubuntu	gmp	20.04	`2:6.2.0+dfsg-3`	vulnerable
Ubuntu	gmp	20.04	`2:6.2.0+dfsg-4`	vulnerable
Ubuntu	gmp	20.04	`2:6.2.0+dfsg-4ubuntu0.1`	fixed
Opensuse	gmp	tumbleweed	`6.2.1-4.1`	fixed
Suse	gmp	linux enterprise module for basesystem 15 sp2	`6.1.2-4.9.1`	fixed
Suse	gmp	linux enterprise module for basesystem 15 sp3	`6.1.2-4.9.1`	fixed
Suse	gmp	linux enterprise module for development tools 15 sp2	`6.1.2-4.9.1`	fixed
Suse	gmp	linux enterprise module for development tools 15 sp3	`6.1.2-4.9.1`	fixed
Suse	gmp	linux enterprise micro 5.0	`6.1.2-4.9.1`	fixed
Suse	gmp	linux enterprise micro 5.1	`6.1.2-4.9.1`	fixed
Suse	gmp	linux enterprise software development kit 12 sp5	`5.1.3-4.3.1`	fixed
Suse	gmp	linux enterprise server 12 sp5	`5.1.3-4.3.1`	fixed
Suse	gmp	linux enterprise server for sap applications 12 sp5	`5.1.3-4.3.1`	fixed
Opensuse	gmp	leap 15.3	`6.1.2-4.9.1`	fixed
Opensuse	gmp	leap 15.2	`6.1.2-lp152.6.6.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	gmp	source	sid	`2:6.2.1+dfsg-3`	not yet assigned	Not reported	[994405]
Debian	gmp	source	forky	`2:6.2.1+dfsg-3`	not yet assigned	Not reported	[994405]
Debian	gmp	source	trixie	`2:6.2.1+dfsg-3`	not yet assigned	Not reported	[994405]
Debian	gmp	source	bookworm	`2:6.2.1+dfsg-3`	not yet assigned	Not reported	[994405]
Alpine	gmp	apk	3.12	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.13	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.14	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.15	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.16	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.17	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.18	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.19	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.20	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.21	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.22	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.23	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Alpine	gmp	apk	3.24	`6.2.1-r1`	Not reported	ALPINE-CVE-2021-43618	Not reported
Ubuntu	gmp	deb	pro	`2:5.1.3+dfsg-1ubuntu1+esm1`	Not reported	USN-5672-2	Not reported
Ubuntu	gmp	deb	pro	`2:6.1.0+dfsg-2ubuntu0.1~esm1`	Not reported	USN-5672-1	Not reported
Ubuntu	gmp	deb	18.04	`2:6.1.2+dfsg-2ubuntu0.1`	Not reported	USN-5672-1	Not reported
Ubuntu	gmp	deb	20.04	`2:6.2.0+dfsg-4ubuntu0.1`	Not reported	USN-5672-1	Not reported
Ubuntu	gmp	deb	pro	`2:6.1.0+dfsg-2ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2021-43618	Not reported
Ubuntu	gmp	deb	18.04	`2:6.1.2+dfsg-2ubuntu0.1`	Not reported	UBUNTU-CVE-2021-43618	Not reported
Ubuntu	gmp	deb	20.04	`2:6.2.0+dfsg-4ubuntu0.1`	Not reported	UBUNTU-CVE-2021-43618	Not reported
Opensuse	gmp	rpm	tumbleweed	`6.2.1-4.1`	Not reported	OPENSUSE-SU-2024:11636-1	Not reported
Suse	gmp	rpm	linux enterprise module for basesystem 15 sp2	`6.1.2-4.9.1`	Not reported	SUSE-SU-2021:3946-1	Not reported
Suse	gmp	rpm	linux enterprise module for basesystem 15 sp3	`6.1.2-4.9.1`	Not reported	SUSE-SU-2021:3946-1	Not reported
Suse	gmp	rpm	linux enterprise module for development tools 15 sp2	`6.1.2-4.9.1`	Not reported	SUSE-SU-2021:3946-1	Not reported
Suse	gmp	rpm	linux enterprise module for development tools 15 sp3	`6.1.2-4.9.1`	Not reported	SUSE-SU-2021:3946-1	Not reported
Suse	gmp	rpm	linux enterprise micro 5.0	`6.1.2-4.9.1`	Not reported	SUSE-SU-2021:3946-1	Not reported
Suse	gmp	rpm	linux enterprise micro 5.1	`6.1.2-4.9.1`	Not reported	SUSE-SU-2021:3946-1	Not reported
Suse	gmp	rpm	linux enterprise software development kit 12 sp5	`5.1.3-4.3.1`	Not reported	SUSE-SU-2021:3878-1	Not reported
Suse	gmp	rpm	linux enterprise server 12 sp5	`5.1.3-4.3.1`	Not reported	SUSE-SU-2021:3878-1	Not reported
Suse	gmp	rpm	linux enterprise server for sap applications 12 sp5	`5.1.3-4.3.1`	Not reported	SUSE-SU-2021:3878-1	Not reported
Opensuse	gmp	rpm	leap 15.3	`6.1.2-4.9.1`	Not reported	OPENSUSE-SU-2021:3946-1	Not reported
Opensuse	gmp	rpm	leap 15.2	`6.1.2-lp152.6.6.1`	Not reported	OPENSUSE-SU-2021:1569-1	Not reported

[Debian bug #994405]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[gmp-devel]Unknown
Source package: [gmp]
Details (1)
- 6.3.0-5.6 · x86_64 · tumbleweed
  Unknown · Fixed: 6.2.1-4.1
  Version impact unknown
  dsa · gmp · opensuse · tumbleweed
[gmp-devel-32bit]Unknown
Source package: [gmp]
Details (1)
- 6.3.0-5.6 · x86_64 · tumbleweed
  Unknown · Fixed: 6.2.1-4.1
  Version impact unknown
  dsa · gmp · opensuse · tumbleweed
[libgmp10]Unknown
Source package: [gmp]
Details (1)
- 6.3.0-5.6 · x86_64 · tumbleweed
  Unknown · Fixed: 6.2.1-4.1
  Version impact unknown
  dsa · gmp · opensuse · tumbleweed
[libgmp10-32bit]Unknown
Source package: [gmp]
Details (1)
- 6.3.0-5.6 · x86_64 · tumbleweed
  Unknown · Fixed: 6.2.1-4.1
  Version impact unknown
  dsa · gmp · opensuse · tumbleweed
[libgmpxx4]Unknown
Source package: [gmp]
Details (1)
- 6.3.0-5.6 · x86_64 · tumbleweed
  Unknown · Fixed: 6.2.1-4.1
  Version impact unknown
  dsa · gmp · opensuse · tumbleweed
[libgmpxx4-32bit]Unknown
Source package: [gmp]
Details (1)
- 6.3.0-5.6 · x86_64 · tumbleweed
  Unknown · Fixed: 6.2.1-4.1
  Version impact unknown
  dsa · gmp · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[libgmp10]Fixed
Source package: [gmp]
Details (2)
- 2:6.2.1+dfsg1-1.1 · amd64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
- 2:6.2.1+dfsg1-1.1 · arm64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
[libgmp10-doc]Fixed
Source package: [gmp]
Details (2)
- 2:6.2.1+dfsg1-1.1 · all · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
- 2:6.2.1+dfsg1-1.1 · all · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
[libgmp3-dev]Fixed
Source package: [gmp]
Details (2)
- 2:6.2.1+dfsg1-1.1 · amd64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
- 2:6.2.1+dfsg1-1.1 · arm64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
[libgmp-dev]Fixed
Source package: [gmp]
Details (2)
- 2:6.2.1+dfsg1-1.1 · amd64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
- 2:6.2.1+dfsg1-1.1 · arm64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
[libgmpxx4ldbl]Fixed
Source package: [gmp]
Details (2)
- 2:6.2.1+dfsg1-1.1 · amd64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm
- 2:6.2.1+dfsg1-1.1 · arm64 · bookworm
  Fixed · Fixed: 2:6.2.1+dfsg-3
  dsa · gmp · debian · bookworm

Observed: Oct 23, 2026, 6:03:29 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]