Name: CVE-2021-3773: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2022-02-16T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-3773, CWE-200, CVSS 9.8, EPSS 0.00651

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade bpftoolUpgrade kernel-tools	May 13, 2022	Feb 16, 2022
Arch Linux	—	Upgrade to the latest version of Arch Linux	Jul 11, 2025	Feb 16, 2022
Centos_linux	—	Upgrade kernelUpgrade kernel-rt	May 13, 2022	Feb 16, 2022
Oracle_linux	—	Upgrade kernel	May 18, 2022	Sep 8, 2021
Redhat_linux	—	Upgrade kernelNo solution existsUpgrade kernel-rt	May 13, 2022	Feb 16, 2022
Rocky_linux	—	Upgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug	May 20, 2022	Feb 16, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence