CVE-2021-3570 - CVE House

Back to Database

Status published High CVE-2021-3570

A flaw was found in the ptp4l program of the...

8.8 CVSS

Vulnerability Description

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3570

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from n/a

View All →

Versions of the package jsondiffpatch before 0.7.2 are vulnerable to...

RemoteClinic profile.php sql injection

Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

RemoteClinic edit-my-profile.php unrestricted upload

RemoteClinic edit-patient.php information disclosure

Affected Vendor

n/a

View all reports →

Affected Software

linuxptp

Vulnerable Versions:

linuxptp 3.1.1, linuxptp 2.0.1, linuxptp 1.9.3, linuxptp 1.8.1, linuxptp 1.7.1, linuxptp 1.6.1, linuxptp 1.5.1

Timeline

Official Publish: July 9th, 2021

Last Modified: August 3rd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1203 Exploitation for Client Execution

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control