DEBIAN-CVE-2021-43114

FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation...

CVE-2021-43114

FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation...

NLnet Labs Routinator 缓冲区错误漏洞

NLnet Labs Routinator is an RPKI Resource Public Key Infrastructure authenticator written in Rust from Stichting NLnet Stichting Nlnet Labs in the Netherlands. A security vulnerability exists in NLnet Labs Routinator, which stems from the mismanagement of system resources e.g., memory, disk space...

PT-2021-23746 · Unknown · Fort Validator

Name of the Vulnerable Software and Affected Versions: FORT Validator versions prior to 1.5.2 Description: The issue occurs when an RPKI CA publishes an X.509 EE certificate, causing FORT Validator to crash. This crash leads to RTR clients, such as BGP routers, losing access to the RPKI VRP data...

NLnet Labs Routinator 资源管理错误漏洞

NLnet Labs Routinator is an RPKI Resource Public Key Infrastructure validator written in the Rust language from Stichting NLnet Stichting Nlnet Labs in the Netherlands. A security vulnerability exists in NLnet Labs Routinator that stems from improper design or implementation during code developme...

[SECURITY] Fedora 35 Update: rpki-client-7.4-1.fc35

The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure RPKI for Relying Parties RP to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisatio...

CVE-2021-31375

An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI, allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed...

CVE-2021-31375

An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI, allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from an incorrect input validation...

ALBA-2021:3573 ca-certificates bug fix and enhancement update

The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. Bug Fixes and Enhancements: Annual 2021 ca-certificates update 2.48 from nss 3.66 for Firefox 91 BZ1971200...

ca-certificates bug fix and enhancement update

The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. Bug Fixes and Enhancements: Annual 2021 ca-certificates update 2.48 from nss 3.66 for Firefox 91 BZ1971200...

CVE-2021-41531

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation...

The vulnerability of the implementation of the Resource Public Key Infrastructure (RPKI) function in the Cisco IOS XR operating system allows a perpetrator to cause a failure in the Border Gateway Protocol (BGP) process.

The vulnerability of the Resource Public Key Infrastructure RPKI function in the Cisco IOS XR operating system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause failures in the Border Gateway Protocol BGP process...

Cisco IOS XR Software Border Gateway Protocol Resource Public Key Infrastructure DoS (cisco-sa-xrbgp-rpki-dos-gvmjqxbk)

According to its self-reported version, Cisco IOS XR is affected by a denial of service DoS vulnerability in the implementation of the Resource Public Key Infrastructure RPKI feature due to incorrect handling of a specific RPKI to Router RTR Protocol packet. An unauthenticated, remote attacker ca...

DEBIAN-CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

UBUNTU-CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

RPKI 缓冲区错误漏洞

RPKI is Resource Public Key Infrastructure RPKI, also known as Resource Certification Resource Certification, the full name in Chinese is "Internet Code Resource Public Key Infrastructure", is a public key infrastructure PKI framework designed to make the Internet routing infrastructure more...

PT-2021-4045 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the implementation of the Resource Public Key Infrastructure RPKI feature could allow an unauthenticated, remote attacker to cause the Border Gateway Protoc...

PT-2021-17073 · Dreamsecurity · Pki Security Solution

Name of the Vulnerable Software and Affected Versions: Dream Security PKI Security Solution version le1.0.0.17 Description: A vulnerability in the PKI Security Solution of Dream Security could allow arbitrary command execution due to insufficient validation of the authorization certificate. An...

Dream Security PKI安全漏洞

Dream Security PKI is a security solution from Dream Security, a South Korean company. A security vulnerability exists in Dream Security PKI that originates. The vulnerability is caused due to insufficient validation of authorization certificates. An attacker can exploit the vulnerability can...