Lucene search

K
osvGoogleOSV:CVE-2021-3908
HistoryNov 11, 2021 - 10:15 p.m.

CVE-2021-3908

2021-11-1122:15:07
Google
osv.dev
7
octorpki
vulnerability
certificate chain
depth
software

EPSS

0.001

Percentile

45.7%

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.