CVE-2021-3618
Fixed in a distro release EPSS 2%
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
Products: f5 nginx, sendmail, vsftpd_project vsftpd, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.14 | nginx | 1.20.1-r1 |
| Alpine 3.15 | nginx | 1.20.1-r1 |
| Alpine 3.16 | nginx | 1.20.1-r1 |
| Alpine 3.17 | nginx | 1.20.1-r1 |
| Alpine 3.18 | nginx | 1.20.1-r1 |
| Alpine 3.19 | nginx | 1.20.1-r1 |
| Alpine 3.20 | nginx | 1.20.1-r1 |
| Alpine 3.21 | nginx | 1.20.1-r1 |
| Alpine 3.22 | nginx | 1.20.1-r1 |
| Alpine 3.23 | nginx | 1.20.1-r1 |
| Alpine 3.24 | nginx | 1.20.1-r1 |
| Amazon Linux 2 | vsftpd | 3.0.2-25.amzn2.0.1 |
| Amazon Linux 2 | vsftpd-sysvinit | 3.0.2-25.amzn2.0.1 |
| Amazon Linux 2023 | nginx | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-all-modules | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-core | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-filesystem | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-mod-devel | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-mod-http-image-filter | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-mod-http-perl | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-mod-http-xslt-filter | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-mod-mail | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | nginx-mod-stream | 1:1.22.1-1.amzn2023.0.2 |
| Amazon Linux 2023 | sendmail | 8.17.1-5.amzn2023.0.4 |
| Amazon Linux 2023 | sendmail-cf | 8.17.1-5.amzn2023.0.4 |
| Amazon Linux 2023 | sendmail-doc | 8.17.1-5.amzn2023.0.4 |
| Amazon Linux 2023 | sendmail-milter | 8.17.1-5.amzn2023.0.4 |
| Amazon Linux 2023 | sendmail-milter-devel | 8.17.1-5.amzn2023.0.4 |
| Amazon Linux 2023 | vsftpd | 3.0.5-1.amzn2023.0.2 |
| Arch Linux | nginx | no fix |
| Arch Linux | nginx-mainline | 1.21.0-1 |
| Arch Linux | vsftpd | no fix |
| Debian 10 | nginx | 1.14.2-2+deb10u5 |
| Debian 12 | nginx | 1.20.2-2 |
| Debian 12 | sendmail | 8.16.1-2 |
| Debian 12 | vsftpd | no fix |
| Debian 13 | nginx | 1.20.2-2 |
| Debian 13 | sendmail | 8.16.1-2 |
| Debian 13 | vsftpd | 3.0.5-0.1 |
| Debian 14 | nginx | 1.20.2-2 |
| Debian 14 | sendmail | 8.16.1-2 |
| Debian 14 | vsftpd | 3.0.5-0.1 |
| SUSE Enterprise Storage 6 | nginx | 1.16.1-150100.6.16.1 |
| SUSE Enterprise Storage 6 | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Enterprise Storage 7 | nginx | 1.16.1-150200.3.9.1 |
| SUSE Enterprise Storage 7 | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | nginx | 1.16.1-150100.6.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | nginx | 1.16.1-150100.6.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | nginx | 1.16.1-150200.3.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | nginx | 1.16.1-150200.3.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | nginx | 1.16.1-150000.3.18.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | nginx | 1.16.1-150000.3.18.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | nginx | 1.19.8-150300.3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP4 | vsftpd | 3.0.5-150400.3.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | vsftpd | 3.0.5-48.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | vsftpd | 3.0.5-47.7.1 |
| SUSE Linux Enterprise Server 12 SP5 | vsftpd | 3.0.5-51.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | nginx | 1.16.1-150100.6.16.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | nginx | 1.16.1-150100.6.16.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | nginx | 1.16.1-150200.3.9.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | nginx | 1.16.1-150200.3.9.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Linux Enterprise Server 15-LTSS | nginx | 1.16.1-150000.3.18.1 |
| SUSE Linux Enterprise Server 15-LTSS | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | vsftpd | 3.0.5-47.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | vsftpd | 3.0.5-51.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | vsftpd | 3.0.5-48.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | nginx | 1.16.1-150000.3.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | nginx | 1.16.1-150100.6.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | vsftpd | 3.0.5-150000.7.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | nginx | 1.16.1-150200.3.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Manager Proxy 4.1 | nginx | 1.16.1-150200.3.9.1 |
| SUSE Manager Proxy 4.1 | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Manager Retail Branch Server 4.1 | nginx | 1.16.1-150200.3.9.1 |
| SUSE Manager Retail Branch Server 4.1 | vsftpd | 3.0.5-150200.12.9.1 |
| SUSE Manager Server 4.1 | nginx | 1.16.1-150200.3.9.1 |
| SUSE Manager Server 4.1 | vsftpd | 3.0.5-150200.12.9.1 |
| Ubuntu 14.04 LTS | sendmail | no fix |
| Ubuntu 14.04 LTS | vsftpd | no fix |
| Ubuntu 16.04 LTS | sendmail | no fix |
| Ubuntu 16.04 LTS | vsftpd | no fix |
| Ubuntu 18.04 LTS | nginx | 1.14.0-0ubuntu1.10 |
| Ubuntu 18.04 LTS | sendmail | no fix |
| Ubuntu 18.04 LTS | vsftpd | no fix |
| Ubuntu 20.04 LTS | nginx | 1.18.0-0ubuntu1.3 |
| Ubuntu 20.04 LTS | sendmail | no fix |
| Ubuntu 20.04 LTS | vsftpd | 3.0.5-0ubuntu0.20.04.1 |
| Ubuntu 22.04 LTS | nginx | 1.18.0-6ubuntu14.1 |
| Ubuntu 22.04 LTS | sendmail | no fix |
| Ubuntu Pro 14.04 LTS | nginx | no fix |
| Ubuntu Pro 16.04 LTS | nginx | 1.10.3-0ubuntu0.16.04.5+esm3 |
| openSUSE Leap 15.3 | nginx | 1.19.8-150300.3.9.1 |
| openSUSE Leap 15.3 | vsftpd | 3.0.5-150200.12.9.1 |
| openSUSE Leap 15.4 | nginx | 1.19.8-150300.3.9.1 |
| openSUSE Leap 15.4 | vsftpd | 3.0.5-150400.3.3.1 |