CVE-2021-30997
First published: Tue Aug 24 2021(Updated: )
A S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some MIME parts. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker may be able to recover plaintext contents of an S/MIME-encrypted e-mail.
Credit: Damian Poddebniak MChristian Dresen MJens Müller Ruhr University BochumFabian Ising MSebastian Schinzel MSimon Friedberger KU LeuvenJuraj Somorovsky Ruhr University BochumJörg Schwenk Ruhr University Bochum cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS | <15.2 | 15.2 |
| Apple iPadOS | <15.2 | 15.2 |
| Apple iPadOS | <15.2 | |
| Apple iPhone OS | <15.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212976 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30960
- CVE-2021-30966
- CVE-2021-30926
- CVE-2021-30942
- CVE-2021-30957
- CVE-2021-30958
- CVE-2021-30945
- CVE-2021-30956
- CVE-2021-30992
- CVE-2021-31013
- CVE-2021-31000
- CVE-2021-30939
- CVE-2021-30996
- CVE-2021-30983
- CVE-2021-30985
- CVE-2021-30991
- CVE-2021-30937
- CVE-2021-30927
- CVE-2021-30980
- CVE-2021-30949
- CVE-2021-30993
- CVE-2021-30955
- CVE-2021-30998
- CVE-2021-30997
- CVE-2021-30943
- CVE-2021-31009
- CVE-2021-30971
- CVE-2021-30973
- CVE-2021-30929
- CVE-2021-30979
- CVE-2021-30940
- CVE-2021-30941
- CVE-2021-30967
- CVE-2021-30988
- CVE-2021-30932
- CVE-2021-30948
- CVE-2021-30995
- CVE-2021-30968
- CVE-2021-30946
- CVE-2021-30947
- CVE-2021-30944
- CVE-2021-30767
- CVE-2021-30964
- CVE-2021-30934
- CVE-2021-30936
- CVE-2021-30951
- CVE-2021-30952
- CVE-2021-30984
- CVE-2021-30953
- CVE-2021-30954
Frequently Asked Questions
What is CVE-2021-30997?
CVE-2021-30997 is a vulnerability in Apple iOS and iPadOS that allows for an S/MIME issue in the handling of encrypted email.
How does CVE-2021-30997 affect Apple iOS and iPadOS?
CVE-2021-30997 affects Apple iOS and iPadOS versions up to and including 15.2.
What is the severity of CVE-2021-30997?
The severity of CVE-2021-30997 is not specified.
How can CVE-2021-30997 be fixed?
CVE-2021-30997 can be fixed by updating Apple iOS and iPadOS to version 15.3 or later.
Where can I find more information about CVE-2021-30997?
More information about CVE-2021-30997 can be found at the following reference link: [Apple Support](https://support.apple.com/en-us/HT212976)
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/description
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple ios
- canonical/apple ipados
- canonical/apple iphone os