Lucene search
GoogleOSV:GHSA-G5GJ-9GGF-9VMQHistoryNov 10, 2021 - 8:38 p.m.
Infinite certificate chain depth results in OctoRPKI running forever
2021-11-1020:38:53
Google
osv.dev
10
octorpki
certificate chain
security advisory
OctoRPKI (github.com/cloudflare/cfrpki/cmd/octorpki) does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.
For more information
If you have any questions or comments about this advisory email us at [email protected]
Related
cve
cve
CVE-2021-3908
2021-11-11 22:15:07
nvd
nvd
CVE-2021-3908
2021-11-11 22:15:07
ubuntucve
ubuntucve
CVE-2021-3908
2021-11-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-11-11 07:55:30
debiancve
debiancve
CVE-2021-3908
2021-11-11 22:15:07
osv
osv
CVE-2021-3908
2021-11-11 22:15:07
Infinite certificate chain depth results in OctoRPKI running forever in github.com/cloudflare/cfrpki
2024-08-21 14:30:26
cfrpki - security update
2022-01-11 00:00:00
github
github
Infinite certificate chain depth results in OctoRPKI running forever
2021-11-10 20:38:53
prion
prion
Design/Logic Flaw
2021-11-11 22:15:00
cvelist
cvelist
openvas
openvas
Debian: Security Advisory (DSA-5041-1)
2022-01-12 00:00:00
nessus
nessus
Debian DSA-5041-1 : cfrpki - security update
2022-01-12 00:00:00
debian
debian
[SECURITY] [DSA 5041-1] cfrpki security update
2022-01-11 21:54:05