PT-2022-10663 · Netfilter+5 · Netfilter+5

Published 2021-09-08 · Updated 2026-03-10 · CVE-2021-3773

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions netfilter (affected versions not specified)

Description A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALSA-2022:1988

ALT-PU-2021-2824

ALT-PU-2021-2926

ALT-PU-2021-3041

ALT-PU-2022-1063

ALT-PU-2022-1108

ALT-PU-2022-1134

ALT-PU-2022-1155

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2022-1441

ALT-PU-2022-1540

ALT-PU-2023-1814

ALT-PU-2023-4894

CESA-2022_1975

CESA-2022_1988

CVE-2021-3773

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

Affected Products

Alt Linux

Almalinux

Centos

Red Hat

Rocky Linux

Netfilter

References · 119

• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3773 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:1988 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3773 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1988 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3773 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1988.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3773 · Security Note
• https://errata.almalinux.org/8/ALSA-2022-1988.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:1975 · Vendor Advisory
• https://oracle.com/security-alerts/cpujul2022.html · Patch
• https://cve.org/CVERecord?id=CVE-2021-3773 · Security Note
• https://t.me/cvenotify/86408 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2009521 · Note