CVE-2021-30998
First published: Tue Aug 24 2021(Updated: )
A S/MIME issue existed in the handling of encrypted email. This issue was addressed with improved selection of the encryption certificate. This issue is fixed in iOS 15.2 and iPadOS 15.2. A sender's email address may be leaked when sending an S/MIME encrypted email using a certificate with more than one email address.
Credit: Benjamin Ehrfeld CISPA Helmholtz Center for Information Security cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPadOS | <15.2 | |
| Apple iPhone OS | <15.2 | |
| Apple iOS | <15.2 | 15.2 |
| Apple iPadOS | <15.2 | 15.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212976 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30960
- CVE-2021-30966
- CVE-2021-30926
- CVE-2021-30942
- CVE-2021-30957
- CVE-2021-30958
- CVE-2021-30945
- CVE-2021-30956
- CVE-2021-30992
- CVE-2021-31013
- CVE-2021-31000
- CVE-2021-30939
- CVE-2021-30996
- CVE-2021-30983
- CVE-2021-30985
- CVE-2021-30991
- CVE-2021-30937
- CVE-2021-30927
- CVE-2021-30980
- CVE-2021-30949
- CVE-2021-30993
- CVE-2021-30955
- CVE-2021-30998
- CVE-2021-30997
- CVE-2021-30943
- CVE-2021-31009
- CVE-2021-30971
- CVE-2021-30973
- CVE-2021-30929
- CVE-2021-30979
- CVE-2021-30940
- CVE-2021-30941
- CVE-2021-30967
- CVE-2021-30988
- CVE-2021-30932
- CVE-2021-30948
- CVE-2021-30995
- CVE-2021-30968
- CVE-2021-30946
- CVE-2021-30947
- CVE-2021-30944
- CVE-2021-30767
- CVE-2021-30964
- CVE-2021-30934
- CVE-2021-30936
- CVE-2021-30951
- CVE-2021-30952
- CVE-2021-30984
- CVE-2021-30953
- CVE-2021-30954
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-30998.
What is the severity level of CVE-2021-30998?
The severity level of CVE-2021-30998 is medium.
What is the affected software of CVE-2021-30998?
The affected software of CVE-2021-30998 are Apple iOS and iPadOS versions up to and exclusive of 15.2.
How was CVE-2021-30998 fixed?
CVE-2021-30998 was fixed with improved selection of the encryption certificate in iOS 15.2 and iPadOS 15.2.
Where can I find more information about CVE-2021-30998?
You can find more information about CVE-2021-30998 on the Apple support website: https://support.apple.com/en-us/HT212976
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/description
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple ios
- canonical/apple ipados
- canonical/apple iphone os