Lucene search
CloudflareCVELIST:CVE-2021-3910HistoryNov 01, 2021 - 12:00 a.m.
CVE-2021-3910 NUL character in ROA causes OctoRPKI to crash
2021-11-0100:00:00
CWE-20
cloudflare
www.cve.org
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.8%
OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).
CNA Affected
[
{
"product": "octorpki",
"vendor": "Cloudflare",
"versions": [
{
"lessThan": "1.4.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
veracode
veracode
Denial Of Service (DoS)
2021-11-12 09:55:05
osv
osv
NUL character in ROA causes OctoRPKI to crash
2021-11-10 20:15:06
Panic on NUL character in ROA in github.com/cloudflare/cfrpki
2022-07-15 23:07:28
CVE-2021-3910
2021-11-11 22:15:07
debiancve
debiancve
CVE-2021-3910
2021-11-11 22:15:07
github
github
NUL character in ROA causes OctoRPKI to crash
2021-11-10 20:15:06
cve
cve
CVE-2021-3910
2021-11-11 22:15:07
nvd
nvd
CVE-2021-3910
2021-11-11 22:15:07
ubuntucve
ubuntucve
CVE-2021-3910
2021-11-11 00:00:00
prion
prion
Design/Logic Flaw
2021-11-11 22:15:00
nessus
nessus
Debian DSA-5041-1 : cfrpki - security update
2022-01-12 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5041-1)
2022-01-12 00:00:00
debian
debian
[SECURITY] [DSA 5041-1] cfrpki security update
2022-01-11 21:54:05
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.8%
Related for CVELIST:CVE-2021-3910