CVE-2021-3773

moderate-risk

Published 2022-02-16

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.

Do I need to act?

0.65% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (8)

Linux Kernel

Fedora

Enterprise Linux

Communications Cloud Native Core Binding Support Function

Communications Cloud Native Core Network Exposure Function

Communications Cloud Native Core Policy

Affected Vendors

Redhat Linux Oracle Fedoraproject

References (7)

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2004949

https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-pri...

Patch https://www.oracle.com/security-alerts/cpujul2022.html

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2004949

https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-pri...

https://security.netapp.com/advisory/ntap-20250328-0004/

Patch https://www.oracle.com/security-alerts/cpujul2022.html

/ 100

moderate-risk

Severity 32/34 · Critical

Exploitability 2/34 · Minimal

Exposure 14/34 · Moderate