CVE-2021-3336
Last modified
CVE-2021-3336 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without the corresponding certificate). The client side is affected because man-in-the-middle attackers can impersonate TLS 1.3 servers.. EPSS estimates a 0.79% chance of exploitation in the next 30 days.
Description
DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without the corresponding certificate). The client side is affected because man-in-the-middle attackers can impersonate TLS 1.3 servers.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wolfssl | Wolfssl | < 4.7.0 |
References
- https://github.com/wolfSSL/wolfssl/pull/3676Patch, Third Party Advisory
- https://www.wolfssl.com/docs/security-vulnerabilitiesVendor Advisory
- https://github.com/wolfSSL/wolfssl/pull/3676Patch, Third Party Advisory
- https://www.wolfssl.com/docs/security-vulnerabilitiesVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-3336?
How severe is CVE-2021-3336?
How do I fix CVE-2021-3336?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-33353Directory Traversal vulnerability in Wyomind Help Desk Magen…9.8
- CVE-2021-33354Directory Traversal vulnerability in htmly before 2.8.1 allo…8.1
- CVE-2021-33356Multiple privilege escalation vulnerabilities in RaspAP 1.5 …8.8
- CVE-2021-33357A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface"…9.8
- CVE-2021-33358Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the…8.8
- CVE-2021-33359A vulnerability exists in gowitness < 2.3.6 that allows an u…7.5
- CVE-2021-33360An issue found in Stoqey gnuplot v.0.0.3 and earlier allows …9.8
- CVE-2021-33361Memory leak in the afra_box_read function in MP4Box in GPAC …5.5
- CVE-2021-33362Stack buffer overflow in the hevc_parse_vps_extension functi…7.8
- CVE-2021-33363Memory leak in the infe_box_read function in MP4Box in GPAC …5.5
- CVE-2021-33364Memory leak in the def_parent_box_new function in MP4Box in …5.5
- CVE-2021-33365Memory leak in the gf_isom_get_root_od function in MP4Box in…5.5
Are you affected by CVE-2021-3336?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST