CVE-2021-4076: Infoleak
A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.
Other sources
A private leak vulnerability was found in Tang v8+.
References: https://bugzilla.redhat.com/showbug.cgi?id=2029685
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-4076?
CVE-2021-4076 is a vulnerability that exists in tang, a network-based cryptographic binding server, which could result in the leak of private keys.
What is the severity of CVE-2021-4076?
The severity of CVE-2021-4076 is high with a CVSS score of 7.5.
How does CVE-2021-4076 impact Tang?
CVE-2021-4076 could result in the leak of private keys and impact the security of Tang, a network-based cryptographic binding server.
Is there a fix available for CVE-2021-4076?
Yes, a fix for CVE-2021-4076 is available. It is recommended to update to a version of Tang that is not affected by the vulnerability.
Where can I find more information about CVE-2021-4076?
More information about CVE-2021-4076 can be found at the following references: [Reference 1](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2029685) and [Reference 2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2032292).