CVE-2021-3773

Key facts

CVSS score

9.8 (v3.1)

Severity

CRITICAL

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-200

EPSS score

5.3% (92th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2021-27042)

Published

February 16, 2022

NVD last modified

June 17, 2026

Status

Modified

Affected products

• fedoraproject / fedora
• linux / linux kernel
• oracle / communications cloud native core binding support function
• oracle / communications cloud native core network exposure function
• oracle / communications cloud native core policy
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux

Certified products that may be affected

23 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5089 - active
• Red Hat Enterprise Linux 8 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 4642 - historical
• Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat®, Inc. - FIPS 140 4458 - historical

See all 23 in the Security Certifications Explorer.

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2004949(Issue Tracking, Third Party Advisory)
• https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-privacy-enhancing-technologies-symposium-2024/
• https://security.netapp.com/advisory/ntap-20250328-0004/
• https://www.oracle.com/security-alerts/cpujul2022.html(Patch, Third Party Advisory)