CVE-2021-3798
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is...
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
- Record
CVE-2021-3798- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
- Record
CVE-2021-3798- Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2021-27058 No score
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
- Record
EUVD-2021-27058- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f2gp-jqv6-cmxg
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is...
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
- Record
GHSA-f2gp-jqv6-cmxg- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200, CWE-295
- Updated
- 2026-11-02
OSVAZL-10659
CVE-2021-3798 affecting package opencryptoki for versions less than 3.17.0-1
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
- Record
AZL-10659- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSV
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
- Record
CVE-2021-3798- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHBA-2021:3054
Red Hat Bug Fix Advisory: opencryptoki bug fix and enhancement update
- Record
RHBA-2021:3054- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-3798
A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.
- Record
UBUNTU-CVE-2021-3798- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opencryptokiAzure Linux:2 |
before 3.17.0-1 | 3.17.0-1 |
opencryptokiRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-ccatokRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-ccatok-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-ep11tokRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-ep11tok-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-icatokRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-icatok-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
opencryptoki-icsftokRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-icsftok-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-libsRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-libs-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-swtokRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-swtok-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-tpmtokRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-tpmtok-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-ccatok-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-develRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-ep11tok-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-icatok-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-icsftok-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-libs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-swtok-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptoki-tpmtok-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:3.15.1-6.el8_4 | 0:3.15.1-6.el8_4 |
opencryptokiUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.1+dfsg-3ubuntu53.4.1+dfsg-1ubuntu13.4.1+dfsg-1ubuntu23.4.1+dfsg-1ubuntu33.4.1+dfsg-1ubuntu43.4.1+dfsg-1ubuntu4.1 |
None known |
opencryptokiUbuntu:18.04:LTS |
All versions, plus listed versions 3.7.0+dfsg-43.8.1+dfsg-23.8.1+dfsg-33.8.2+dfsg-0ubuntu13.9.0+dfsg-0ubuntu1 Show 4 moreShow less3.9.0+dfsg-0ubuntu1.13.9.0+dfsg-0ubuntu1.23.9.0+dfsg-0ubuntu1.33.9.0+dfsg-0ubuntu1.4 |
None known |
opencryptokiUbuntu:20.04:LTS |
All versions, plus listed versions 3.11.1+dfsg-0ubuntu23.11.1+dfsg-0ubuntu33.12.1+dfsg-0ubuntu13.13.0+dfsg-0ubuntu43.13.0+dfsg-0ubuntu53.13.0+dfsg-0ubuntu5.13.13.0+dfsg-0ubuntu5.2 |
None known |
opencryptokiUbuntu:22.04:LTS |
All versions, plus listed versions 3.16.0+dfsg-0ubuntu13.16.0+dfsg-0ubuntu23.16.0+dfsg-0ubuntu33.17.0+dfsg+20220202.b40982e-0ubuntu13.17.0+dfsg+20220202.b40982e-0ubuntu1.13.17.0+dfsg+20220202.b40982e-0ubuntu1.23.17.0+dfsg+20220202.b40982e-0ubuntu1.3 |
None known |
opencryptokiUbuntu:24.04:LTS |
All versions, plus listed versions 3.21.0+dfsg-0ubuntu13.21.0+dfsg-0ubuntu23.22.0+dfsg-0ubuntu13.23.0+dfsg-0ubuntu13.23.0+dfsg-0ubuntu23.23.0+dfsg-0ubuntu33.23.0+dfsg-0ubuntu3.1 |
None known |
opencryptokiUbuntu:25.10 |
All versions, plus listed versions 3.24.0+git20250128.0462717+dfsg-0ubuntu13.25.0+dfsg-0ubuntu1 |
None known |
opencryptokiUbuntu:26.10 |
All versions, plus listed versions 3.26.0+dfsg-0ubuntu13.27.0+dfsg-0ubuntu13.27.0+dfsg-0ubuntu2 |
None known |
opencryptokiUbuntu:26.04:LTS |
All versions, plus listed versions 3.25.0+dfsg-0ubuntu13.26.0+dfsg-0ubuntu13.26.0+dfsg-0ubuntu1.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3798 is a medium vulnerability (CVSS 5.5) in Opencryptoki, published August 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. Fixed in opencryptoki 3.17.0-1.