Log in Start free

Vulnerability · Published Dec 23, 2021 · Assigned by mitre

CVE-2021-44273

High 7.4

In plain English

A high-severity security flaw in the e2guardian package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.4High
Exploit odds (30 days)1.0%top 36.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or a transparent proxy), with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers that it connected to, and thus was itself vulnerable to MITM attacks.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20e2guardian5.4.5r-r0ALPINE-CVE-2021-44273
Alpine:v3.21e2guardian5.4.5r-r0ALPINE-CVE-2021-44273
Alpine:v3.22e2guardian5.4.5r-r0ALPINE-CVE-2021-44273
Alpine:v3.23e2guardian5.4.5r-r0ALPINE-CVE-2021-44273
Alpine:v3.24e2guardian5.4.5r-r0ALPINE-CVE-2021-44273
Debian:12e2guardian5.3.5-3DEBIAN-CVE-2021-44273
Debian:13e2guardian5.3.5-3DEBIAN-CVE-2021-44273
Debian:14e2guardian5.3.5-3DEBIAN-CVE-2021-44273
Ubuntu:22.04:LTSe2guardianno fix listedUBUNTU-CVE-2021-44273
Ubuntu:24.04:LTSe2guardianno fix listedUBUNTU-CVE-2021-44273
Ubuntu:25.10e2guardianno fix listedUBUNTU-CVE-2021-44273
Ubuntu:26.04:LTSe2guardianno fix listedUBUNTU-CVE-2021-44273
Ubuntu:26.10e2guardianno fix listedUBUNTU-CVE-2021-44273

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References