CVE-2021-3798: Infoleak
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via CCreateObject, nor when CDeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
Other sources
It was discovered that openCryptoki incorrectly handled certain EC keys. An attacker could possibly use this issue to cause a invalid curve attack.
Reference: https://packetstormsecurity.com/files/163741/USN-5031-1.txt
Upstream patch: https://github.com/opencryptoki/opencryptoki/commit/4e3b43c3d8844402c04a66b55c6c940f965109f0
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3798?
CVE-2021-3798 is classified as a high-severity vulnerability due to the potential for private key extraction.
How do I fix CVE-2021-3798?
To fix CVE-2021-3798, upgrade to Opencryptoki version 3.17.0 or later where the vulnerability has been addressed.
What kind of attack does CVE-2021-3798 allow?
CVE-2021-3798 allows a malicious user to perform an invalid curve attack to extract private keys.
Which versions of Opencryptoki are affected by CVE-2021-3798?
CVE-2021-3798 affects all versions of Opencryptoki prior to 3.17.0.
What components are involved in CVE-2021-3798?
CVE-2021-3798 involves the openCryptoki Soft token functions C_CreateObject and C_DeriveKey.