CVE-2021-3570
published 2021-07-09CVE-2021-3570: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to…
PriorityP258high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
2.96%
87.1th percentile
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linuxptp | < linuxptp 3.1-2.1 (bookworm) | linuxptp 3.1-2.1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| linuxptp_project | linuxptp | < 1.5.1 | 1.5.1 |
| linuxptp_project | linuxptp | — | — |
| linuxptp_project | linuxptp | >= 0 < 3.1-2.1 | 3.1-2.1 |
| linuxptp_project | linuxptp | >= 0 < 3.1-2.1 | 3.1-2.1 |
| linuxptp_project | linuxptp | >= 0 < 3.1-2.1 | 3.1-2.1 |
| linuxptp_project | linuxptp | >= 0 < 3.1-2.1 | 3.1-2.1 |
| linuxptp_project | linuxptp | >= 1.6.0 < 1.6.1 | 1.6.1 |
| linuxptp_project | linuxptp | >= 1.7.0 < 1.7.1 | 1.7.1 |
| linuxptp_project | linuxptp | >= 1.8.0 < 1.8.1 | 1.8.1 |
| linuxptp_project | linuxptp | >= 1.9.0 < 1.9.3 | 1.9.3 |
| linuxptp_project | linuxptp | >= 2.0.0 < 2.0.1 | 2.0.1 |
| linuxptp_project | linuxptp | >= 3.0.0 < 3.1.1 | 3.1.1 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_aus | — | — |
| redhat | enterprise_linux_aus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_tus | — | — |
| redhat | enterprise_linux_tus | — | — |
Detection & IOCsextracted from sources · hover to see the quote
snort↗
(port 319 or port 320) and udp[8]&0xf=0xd
- →Detect PTP management messages over UDP by matching on ports 319/320 with the message type nibble 0xd (management) in the UDP payload byte offset 8. ↗
- →Monitor the ptp4l process for unexpected crashes or anomalous memory access, which may indicate exploitation of the missing length check when forwarding PTP messages between ports. ↗
- ·Attack surface is reduced if ptp4l is bound only to a private network interface or if firewall rules block incoming PTP management messages. ↗
- ·Only attackers that can connect to the ptp4l service can exploit this vulnerability; network-level access control is an effective mitigation. ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.08.0HIGHAV:N/AC:L/Au:S/C:P/I:P/A:C
osv8.8HIGH
vendor_debian8.8HIGH
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux PTP vulnerability
vendor_ubuntu·2023-05-29
CVE-2021-3570 Linux PTP vulnerability
Title: Linux PTP vulnerability
Summary: Linux PTP could be made to crash, run arbitrary code, or expose
sensitive information if it received specially crafted input.
It was discovered that Linux PTP did not properly perform a length check
when forwarding a PTP message between ports. A remote attacker could
possibly use this issue to access sensitive information, execute
arbitrary code, or cause a denial of service.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
linuxptp: missing length check of forwarded messages
vendor_redhat·2021-07-05·CVSS 8.8
CVE-2021-3570 [HIGH] CWE-119 linuxptp: missing length check of forwarded messages
linuxptp: missing length check of forwarded messages
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vul
Debian
CVE-2021-3570: linuxptp - A flaw was found in the ptp4l program of the linuxptp package. A missing length ...
vendor_debian·2021·CVSS 8.8
CVE-2021-3570 [HIGH] CVE-2021-3570: linuxptp - A flaw was found in the ptp4l program of the linuxptp package. A missing length ...
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.
Scope: local
bookworm: resolved (fixed in 3.1-2.1)
bullseye: resolved (fixed in 3.1-2.1)
forky: resolved (fixed in 3.1-2.1)
sid: resolved (fixed in 3.1-2.1)
trixie: resolved (fixed in 3.1-2.1)
GHSA
GHSA-rwc4-5qx3-qg4w: A flaw was found in the ptp4l program of the linuxptp package
ghsa_unreviewed·2022-05-24
CVE-2021-3570 [HIGH] CWE-119 GHSA-rwc4-5qx3-qg4w: A flaw was found in the ptp4l program of the linuxptp package
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.
OSV
CVE-2021-3570: A flaw was found in the ptp4l program of the linuxptp package
osv·2021-07-09·CVSS 8.8
CVE-2021-3570 [HIGH] CVE-2021-3570: A flaw was found in the ptp4l program of the linuxptp package
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://bugzilla.redhat.com/show_bug.cgi?id=1966240https://lists.debian.org/debian-lts-announce/2021/07/msg00025.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RHRUVSDP673LXJ5HGIPQPWPIYUPWYQA7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUBKTRCMJ6VKS7DIBSZQB4ATSKVCJYXJ/https://www.debian.org/security/2021/dsa-4938https://bugzilla.redhat.com/show_bug.cgi?id=1966240https://lists.debian.org/debian-lts-announce/2021/07/msg00025.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RHRUVSDP673LXJ5HGIPQPWPIYUPWYQA7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUBKTRCMJ6VKS7DIBSZQB4ATSKVCJYXJ/https://www.debian.org/security/2021/dsa-4938
2021-07-09
Published