Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-20179

Fixed in a distro release EPSS 1%

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Published 2021-03-15 · CVE record · OSV

Products: dogtagpki, redhat certificate_system, redhat enterprise_linux, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Amazon Linux 2pki-base10.5.18-12.amzn2.0.1
Amazon Linux 2pki-base-java10.5.18-12.amzn2.0.1
Amazon Linux 2pki-ca10.5.18-12.amzn2.0.1
Amazon Linux 2pki-javadoc10.5.18-12.amzn2.0.1
Amazon Linux 2pki-kra10.5.18-12.amzn2.0.1
Amazon Linux 2pki-server10.5.18-12.amzn2.0.1
Amazon Linux 2pki-symkey10.5.18-12.amzn2.0.1
Amazon Linux 2pki-tools10.5.18-12.amzn2.0.1
Debian 11dogtag-pki10.10.2-2
Red Hat Enterprise Linux 7pki-base0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-base-java0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-ca0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-core0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-core-debuginfo0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-javadoc0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-kra0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-server0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-symkey0:10.5.18-12.el7_9
Red Hat Enterprise Linux 7pki-tools0:10.5.18-12.el7_9
Red Hat Enterprise Linux 8jss0:4.7.3-1.module+el8.3.0+8058+d5cd4219
Red Hat Enterprise Linux 8jss-debuginfo0:4.7.3-1.module+el8.3.0+8058+d5cd4219
Red Hat Enterprise Linux 8jss-debugsource0:4.7.3-1.module+el8.3.0+8058+d5cd4219
Red Hat Enterprise Linux 8jss-javadoc0:4.7.3-1.module+el8.3.0+8058+d5cd4219
Red Hat Enterprise Linux 8ldapjdk0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
Red Hat Enterprise Linux 8ldapjdk-javadoc0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
Red Hat Enterprise Linux 8pki-base0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-base-java0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-ca0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-core0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-core-debuginfo0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-core-debugsource0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-kra0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-server0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-symkey0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-symkey-debuginfo0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-tools0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8pki-tools-debuginfo0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8python3-pki0:10.9.4-3.module+el8.3.0+10353+73f6df5b
Red Hat Enterprise Linux 8tomcatjss0:7.5.0-1.module+el8.3.0+7355+c59bcbd9
Red Hat rhel eus 7.6pki-base0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-base-java0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-ca0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-core0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-core-debuginfo0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-javadoc0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-kra0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-server0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-symkey0:10.5.9-15.el7_6
Red Hat rhel eus 7.6pki-tools0:10.5.9-15.el7_6
Red Hat rhel eus 7.7pki-base0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-base-java0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-ca0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-core0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-core-debuginfo0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-javadoc0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-kra0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-server0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-symkey0:10.5.16-7.el7_7
Red Hat rhel eus 7.7pki-tools0:10.5.16-7.el7_7
Red Hat rhel eus 8.2jss0:4.6.2-12.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2jss-debuginfo0:4.6.2-12.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2jss-debugsource0:4.6.2-12.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2jss-javadoc0:4.6.2-12.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2ldapjdk0:4.21.0-2.module+el8.2.0+6294+b7db4606
Red Hat rhel eus 8.2ldapjdk-javadoc0:4.21.0-2.module+el8.2.0+6294+b7db4606
Red Hat rhel eus 8.2pki-base0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-base-java0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-ca0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-core0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-core-debuginfo0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-core-debugsource0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-kra0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-server0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-symkey0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-symkey-debuginfo0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-tools0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2pki-tools-debuginfo0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2python3-pki0:10.8.3-6.module+el8.2.0+10554+cf83aa72
Red Hat rhel eus 8.2tomcatjss0:7.4.1-2.module+el8.2.0+6294+b7db4606
Rocky Linux 8ldapjdk0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
Ubuntu Pro 18.04 LTSdogtag-pki10.6.0-1ubuntu2+esm1
Ubuntu Pro 20.04 LTSdogtag-pki10.8.3-1ubuntu1+esm1