CVE-2021-34558

lowpriority · track · 38EPSS 0.070 · 94 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

6.98% (94th) EPSS

CVSS 2.6 · low

Is it mine?

56 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedcontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:59070d43607b341ecaa9a65f999fed06ef03885035fa3deef0f2f3a7b9287d13_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733
Fixedcontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:11940ade61478e72b11faa3806967583c00779718206953e606025dd8a094c57_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733
Fixedcontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:6a4d596992e1b1a028756ed9d8c4b3acc6ef61bd510a890ab61d8ab35cbe3331_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733
Fixedcontainer-native-virtualization/vm-import-controller-rhel8@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733
Fixedcontainer-native-virtualization/vm-import-controller@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733
Fixedstf/service-telemetry-operator-bundle@sha256:3aa38a05aa77bdac184c57f3152b56a9d43447dc086fb8d1388bf50f451d0947_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.
https://access.redhat.com/errata/RHSA-2021:4582
Fixedstf/service-telemetry-rhel8-operator@sha256:26aada4cf2ee8427a482d23a26ac735a4141e885e04381e3eea0f417ddb7002a_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.
https://access.redhat.com/errata/RHSA-2021:4582
Fixedstf/sg-core-rhel8@sha256:4ab99a587b957ec36ef14738abff0608e8bf14d18c771c6a405fdf003065b1fe_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.
https://access.redhat.com/errata/RHSA-2021:4582
Fixedstf/smart-gateway-operator-bundle@sha256:f2105fb56eab3cf34f3012932ac74674743037797c7f0022a46b550d975e2605_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.
https://access.redhat.com/errata/RHSA-2021:4582
Fixedstf/smart-gateway-rhel8-operator@sha256:2f3d0901349c9e57c6084d4e5fa1407cd882d6c56163c69b54bbf69bdc919bdc_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.
https://access.redhat.com/errata/RHSA-2021:4582
Workaroundcontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:59070d43607b341ecaa9a65f999fed06ef03885035fa3deef0f2f3a7b9287d13_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundcontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:11940ade61478e72b11faa3806967583c00779718206953e606025dd8a094c57_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundcontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:6a4d596992e1b1a028756ed9d8c4b3acc6ef61bd510a890ab61d8ab35cbe3331_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundcontainer-native-virtualization/vm-import-controller-rhel8@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundcontainer-native-virtualization/vm-import-controller@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundstf/service-telemetry-operator-bundle@sha256:3aa38a05aa77bdac184c57f3152b56a9d43447dc086fb8d1388bf50f451d0947_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundstf/service-telemetry-rhel8-operator@sha256:26aada4cf2ee8427a482d23a26ac735a4141e885e04381e3eea0f417ddb7002a_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundstf/sg-core-rhel8@sha256:4ab99a587b957ec36ef14738abff0608e8bf14d18c771c6a405fdf003065b1fe_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundstf/smart-gateway-operator-bundle@sha256:f2105fb56eab3cf34f3012932ac74674743037797c7f0022a46b550d975e2605_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundstf/smart-gateway-rhel8-operator@sha256:2f3d0901349c9e57c6084d4e5fa1407cd882d6c56163c69b54bbf69bdc919bdc_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.6–6.5

v2.02.6lowAV:N/AC:H/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 4.9 · impact 2.9

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.16.5mediumAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.2mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-295USprimaryCWE-20USCWE-295US

exploits (1)

Public proof-of-concept and weaponised exploit code.

alexzorin/cve-2021-34558alexzorin/cve-2021-34558PoC · poc_in_github

affected products (56)

Products and version ranges known to be affected.

Atlassian Confluence <10.0.2all versionscert_bundDE
Atlassian Confluence <10.1.1all versionscert_bundDE
Atlassian Confluence <8.5.25all versionscert_bundDE
Atlassian Confluence <9.2.7all versionscert_bundDE
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
Splunk Splunk Enterpriseall versionscert_bundDEcpe:/a:splunk:splunk:-
Splunk Splunk Enterprise <8.2.12all versionscert_bundDE
Splunk Splunk Enterprise <9.0.6all versionscert_bundDE
Splunk Splunk Enterprise <9.0.9all versionscert_bundDE
Splunk Splunk Enterprise <9.1.1all versionscert_bundDE
Splunk Splunk Enterprise <9.1.4all versionscert_bundDE
Splunk Splunk Enterprise <9.2.1all versionscert_bundDE
Atlassian Confluence< 10.0.2cert_bundDE
Atlassian Confluence< 10.1.1cert_bundDE
Atlassian Confluence< 8.5.25cert_bundDE
Atlassian Confluence< 9.2.7cert_bundDE
Splunk Splunk Enterprise< 8.2.12cert_bundDE
Splunk Splunk Enterprise< 9.0.6cert_bundDE
Splunk Splunk Enterprise< 9.0.9cert_bundDE

showing 20 of 56

advisories (7)

Vendor and ecosystem advisories describing this.

RHSA-2021:3733Red Hat Security Advisory: OpenShift Virtualization 2.6.7 Images security and bug fix update2021-10-06csaf · redhat_csafUS
Red Hat OpenShift Virtualization release 2.6.7 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2021:4582Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.3.3 - Container Images2021-11-10csaf · redhat_csafUS
Release of components for the Service Telemetry Framework
WID-SEC-W-2022-0966Red Hat OpenShift: Schwachstelle ermöglicht Denial of ServiceDeutsch2021-08-04csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2022-1335Xerox FreeFlow Print Server: Mehrere SchwachstellenDeutsch2022-09-07csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.
WID-SEC-W-2023-2229Splunk Splunk Enterprise: Mehrere SchwachstellenDeutsch2023-08-30csaf · cert_bundDE
Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern und weitere, nicht spezifizierte Auswirkungen zu verursachen.
BIT-golang-2021-345582024-03-06vendor · osvUS
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
GO-2021-0243Panic on certain certificates in crypto/tls2022-02-17vendor · osvUS
crypto/tls clients can panic when provided a certificate of the wrong type for the negotiated parameters. net/http clients performing HTTPS requests are also affected.

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund redhat_csaf NVD CVE.org MITRE

published 2021-07-15modified 2026-06-17

related (1,894)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-85102US	—OT critical	54.1% (99th)	KEV	2026-09-09
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the G…
CVE-2023-41991US	medium5.5OT critical	13.4% (96th)	KEV	2023-09-21
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple…
CVE-2023-20963US	high7.8OT critical	1.47% (74th)	KEV	2023-03-24
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	2022-05-10
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-20703US	high8.0OT critical	9.20% (95th)	KEV	2022-02-10
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate pr…

+1889 more

references (120)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan