CVE-2021-3773: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days.

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.

Affected products

• Fedoraproject Fedora: version 34 only
• Linux Linux Kernel: before 5.14 (fixed in 5.14); from 5.15, before 5.15.15 (fixed in 5.15.15)
• Oracle Communications Cloud Native Core Binding Support Function: version 22.1.3 only
• Oracle Communications Cloud Native Core Network Exposure Function: version 22.1.1 only
• Oracle Communications Cloud Native Core Policy: version 22.2.0 only
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 8.0 only

Published 2022-02-16. Last modified 2026-06-17.