CVE-2021-3798

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-23 · updated 2026-06-17
Weakness: CWE-200

Description

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.

Affected products

opencryptoki: before 3.17.0 — fixed in 3.17.0

How to fix

Upgrade to a fixed version: opencryptoki 3.17.0. Check the vendor advisory for mitigations.

References

https://access.redhat.com/security/cve/CVE-2021-3798
https://bugzilla.redhat.com/show_bug.cgi?id=1990591
https://github.com/opencryptoki/opencryptoki/commit/4e3b43c3d8844402c04a66b55c6c940f965109f0
https://github.com/opencryptoki/opencryptoki/pull/402
https://access.redhat.com/security/cve/CVE-2021-3798
https://bugzilla.redhat.com/show_bug.cgi?id=1990591
https://github.com/opencryptoki/opencryptoki/commit/4e3b43c3d8844402c04a66b55c6c940f965109f0
https://github.com/opencryptoki/opencryptoki/pull/402

Get alerted when CVE-2021-3798 or the next vulnerability affects your stack