https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:45:05.936765+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4321 ALSA-2021:4321 — Moderate: linuxptp security, bug fix, and enhancement update 2026-10-08T02:45:06.073697+00:00

Affected: AlmaLinux:8: linuxptp

The linuxptp packages provide Precision Time Protocol (PTP) implementation for Linux according to IEEE standard 1588 for Linux. The dual design goals are to provide a robust implementation of the standard and to use the most relevant and modern Application Programming Interfaces (API) offered by the Linux kernel.

The following packages have been upgraded to a later upstream version: linuxptp (3.1.1). (BZ#1895005)

Security Fix(es):

* linuxptp: wrong length of one-step follow-up in transparent clock (CVE-2021-3571)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-04469 bdu:2021-04469 2026-10-08T02:45:06.073776+00:00 bdu:2021-04469 https://cve.radiocsirt.org/vuln/euvd-2026-21022 EUVD-2026-21022 2026-10-08T02:45:06.073795+00:00 EUVD-2026-21022 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3571 fkie_cve-2021-3571 2026-10-08T02:45:06.073808+00:00

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.

 https://cve.radiocsirt.org/vuln/ghsa-3v9q-m45q-4cr7 GHSA-3v9q-m45q-4cr7 2026-10-08T02:45:06.073832+00:00

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.

 https://cve.radiocsirt.org/vuln/gsd-2021-3571 gsd-2021-3571 2026-10-08T02:45:06.073849+00:00 gsd-2021-3571 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3571 msrc_CVE-2021-3571 — A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture… 2026-10-08T02:45:06.073867+00:00 msrc_CVE-2021-3571 https://cve.radiocsirt.org/vuln/oesa-2021-1267 OESA-2021-1267 — linuxptp security update 2026-10-08T02:45:06.073886+00:00

Affected: openEuler:20.03-LTS-SP1: linuxptp

Linuxptp is an implementation of the Precision Time Protocol (PTP) according to IEEE standard 1588 for Linux. The dual design goals are to provide a robust implementation of the standard and to use the most relevant and modern Application Programming Interfaces (API) offered by the Linux kernel. Supporting legacy APIs and other platforms is not a goal. Security Fix(es): A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.(CVE-2021-3571)

 https://cve.radiocsirt.org/vuln/rhsa-2021:4321 RHSA-2021:4321 — Red Hat Security Advisory: linuxptp security, bug fix, and enhancement update 2026-10-08T02:45:06.073911+00:00

linuxptp: wrong length of one-step follow-up in transparent clock

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3571 Withdrawn: UBUNTU-CVE-2021-3571 2026-10-08T02:45:06.073928+00:00

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: linuxptp

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0571 WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-08T02:45:06.073948+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.