CVE-2021-3773

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

5.28%

Published

Feb 16, 2022

Modified

Mar 28, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-200

Affected Products (9)

linux · linux_kernel (up to 5.14)vulnerable

linux · linux_kernel (up to 5.15.15)vulnerable

fedoraproject · fedoravulnerable

redhat · enterprise_linuxvulnerable

oracle · communications_cloud_native_core_binding_support_functionvulnerable

oracle · communications_cloud_native_core_network_exposure_functionvulnerable

oracle · communications_cloud_native_core_policyvulnerable

References (7)

https://bugzilla.redhat.com/show_bug.cgi?id=2004949

Issue TrackingThird Party Advisory

https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-privacy-enhancing-technologies-symposium-2024/

https://www.oracle.com/security-alerts/cpujul2022.html

PatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2004949

Issue TrackingThird Party Advisory

https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-privacy-enhancing-technologies-symposium-2024/

https://security.netapp.com/advisory/ntap-20250328-0004/

https://www.oracle.com/security-alerts/cpujul2022.html

PatchThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs