Lucene search
GoogleOSV:GHSA-5MXH-2QFV-4G7JHistoryNov 10, 2021 - 8:15 p.m.
NUL character in ROA causes OctoRPKI to crash
2021-11-1020:15:06
Google
osv.dev
8
0.001 Low
EPSS
Percentile
30.8%
OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).
Patches
For more information
If you have any questions or comments about this advisory email us at [email protected]
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/cloudflare/cfrpki | lt | 1.4.0 |
References
github.com/cloudflare/cfrpki
github.com/cloudflare/cfrpki/commit/76f0f7a98da001fa04e5bc0407c6702f91096bfa
github.com/cloudflare/cfrpki/releases/tag/v1.4.0
github.com/cloudflare/cfrpki/security/advisories/GHSA-5mxh-2qfv-4g7j
nvd.nist.gov/vuln/detail/CVE-2021-3910
pkg.go.dev/vuln/GO-2022-0251
www.debian.org/security/2022/dsa-5041
Related
nvd
nvd
CVE-2021-3910
2021-11-11 22:15:07
ubuntucve
ubuntucve
CVE-2021-3910
2021-11-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-11-12 09:55:05
osv
osv
Panic on NUL character in ROA in github.com/cloudflare/cfrpki
2022-07-15 23:07:28
CVE-2021-3910
2021-11-11 22:15:07
cfrpki - security update
2022-01-11 00:00:00
debiancve
debiancve
CVE-2021-3910
2021-11-11 22:15:07
github
github
NUL character in ROA causes OctoRPKI to crash
2021-11-10 20:15:06
cve
cve
CVE-2021-3910
2021-11-11 22:15:07
cvelist
cvelist
CVE-2021-3910 NUL character in ROA causes OctoRPKI to crash
2021-11-01 00:00:00
prion
prion
Design/Logic Flaw
2021-11-11 22:15:00
debian
debian
[SECURITY] [DSA 5041-1] cfrpki security update
2022-01-11 21:54:05
nessus
nessus
Debian DSA-5041-1 : cfrpki - security update
2022-01-12 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5041-1)
2022-01-12 00:00:00