CVE-2021-3618

NameCVE-2021-3618
DescriptionALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-3203-1, ELA-739-1
Debian Bugs991328, 991329, 991331

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
nginx (PTS)jessie, jessie (lts)1.6.2-5+deb8u10fixed
stretch (security)1.10.3-1+deb9u7vulnerable
stretch (lts), stretch1.10.3-1+deb9u8fixed
buster (security), buster, buster (lts)1.14.2-2+deb10u5fixed
bullseye (security), bullseye1.18.0-6.1+deb11u3fixed
bookworm1.22.1-9fixed
sid, trixie1.26.0-3fixed
sendmail (PTS)jessie8.14.4-8+deb8u2vulnerable
stretch (lts), stretch8.15.2-8+deb9u2vulnerable
buster (security), buster, buster (lts)8.15.2-14~deb10u3vulnerable
bullseye8.15.2-22+deb11u3vulnerable
bookworm8.17.1.9-2+deb12u2fixed
sid, trixie8.18.1-6fixed
vsftpd (PTS)jessie3.0.2-17+deb8u1vulnerable
stretch3.0.3-8vulnerable
buster, bullseye3.0.3-12vulnerable
bookworm3.0.3-13vulnerable
sid, trixie3.0.3-13.1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
nginxsourcejessie1.6.2-5+deb8u10ELA-739-1
nginxsourcestretch1.10.3-1+deb9u8ELA-739-1
nginxsourcebuster1.14.2-2+deb10u5DLA-3203-1
nginxsourcebullseye1.18.0-6.1+deb11u2
nginxsource(unstable)1.20.2-2991328
sendmailsourceexperimental8.16.1-1
sendmailsource(unstable)8.16.1-2991331
vsftpdsource(unstable)(unfixed)991329

Notes

[stretch] - nginx <no-dsa> (Minor issue)
[bookworm] - vsftpd <no-dsa> (Minor issue)
[bullseye] - vsftpd <no-dsa> (Minor issue)
[buster] - vsftpd <no-dsa> (Minor issue)
[stretch] - vsftpd <no-dsa> (Minor issue)
[bullseye] - sendmail <no-dsa> (Minor issue)
[buster] - sendmail <no-dsa> (Minor issue)
[stretch] - sendmail <no-dsa> (Minor issue)
https://bugzilla.redhat.com/show_bug.cgi?id=1975623
https://alpaca-attack.com/
Generic TLS protocol issue, some applications have released mitigations:
nginx: http://hg.nginx.org/nginx/rev/ec1071830799
vsftpd: https://security.appspot.com/vsftpd/Changelog.txt (3.0.4)
* Close the control connection after 10 unknown commands pre-login.
* Reject any TLS ALPN advertisement that's not 'ftp'.
* Add ssl_sni_hostname option to require a match on incoming SNI hostname.
sendmail: Fixed in 3.16.1: https://marc.info/?l=sendmail-announce&m=159394546814125&w=2
exim4 has config option: https://lists.exim.org/lurker/message/20210609.200324.f0e073ed.el.html
[jessie] - sendmail <no-dsa> (Minor issue)
[jessie] - vsftpd <no-dsa> (Minor issue)

Search for package or bug name: Reporting problems