Denial Of Service (DoS)

cmd/octorpki of github.com/cloudflare/cfrpki is vulnerable to denial of service. Due to lack of limitation in the depth of a certificate chain, when a CA creates children in an ad-hoc fashion, it results in never-ending tree traversal...

Cloudflare OctoRPKI 安全漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. Cloudflare OctoRPKI has a security vulnerability that originates from an improperly designed or implemented code development process for a network system or product...

Cloudflare OctoRPKI 资源管理错误漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. Cloudflare OctoRPKI has a security vulnerability that originates from an improperly designed or implemented code development process for a network system or product...

Cloudflare OctoRPKI 输入验证错误漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. Cloudflare OctoRPKI suffers from an input validation error vulnerability that stems from OctoRPKI crashing when it encounters a repository that returns an invalid ROA, which is just an encoded NUL character...

Cloudflare OctoRPKI 资源管理错误漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. Cloudflare OctoRPKI has a security vulnerability that allows an attacker to send a slow DOS attack, which keeps OctoRPKI in a waiting state...

Cloudflare OctoRPKI 路径遍历漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. Cloudflare OctoRPKI suffers from a path traversal vulnerability that could allow an attacker to remotely execute code on the host...

Cloudflare OctoRPKI 资源管理错误漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. A security vulnerability exists in Cloudflare OctoRPKI that allows the CA to traverse the directory structure by creating child nodes in a specific way...

GHSA-G9WH-3VRX-R7HG OctoRPKI crashes when processing GZIP bomb returned via malicious repository

OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory and thus crash. Patches For more information If you have any questions or comments about this...

OctoRPKI crashes when processing GZIP bomb returned via malicious repository

OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory and thus crash. Patches For more information If you have any questions or comments about this...

GHSA-G5GJ-9GGF-9VMQ Infinite certificate chain depth results in OctoRPKI running forever

OctoRPKI github.com/cloudflare/cfrpki/cmd/octorpki does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end. For more information If you have any questions or comments about this advisory email us at...

Infinite certificate chain depth results in OctoRPKI running forever

OctoRPKI github.com/cloudflare/cfrpki/cmd/octorpki does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end. For more information If you have any questions or comments about this advisory email us at...

GHSA-8CVR-4RRF-F244 Infinite open connection causes OctoRPKI to hang forever

OctoRPKI github.com/cloudflare/cfrpki/cmd/octorpki does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever. Specifically, the repository that OctoRPKI sends HTTP requests to will keep the connection open for a day before a...

Infinite open connection causes OctoRPKI to hang forever

OctoRPKI github.com/cloudflare/cfrpki/cmd/octorpki does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever. Specifically, the repository that OctoRPKI sends HTTP requests to will keep the connection open for a day before a...

GHSA-5MXH-2QFV-4G7J NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

GHSA-CQH2-VC2F-Q4FH Arbitrary filepath traversal via URI injection

OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, ex. rsync://example.org/repo/../../etc/cron.daily/evil.roa, which would then be written to disk outside the base cache folder. This could allow for remote code execution on the host machine...

Arbitrary filepath traversal via URI injection

OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, ex. rsync://example.org/repo/../../etc/cron.daily/evil.roa, which would then be written to disk outside the base cache folder. This could allow for remote code execution on the host machine...

Misconfigured IP address field in ROA leads to OctoRPKI crash

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

GHSA-W6WW-FMFX-2X22 Misconfigured IP address field in ROA leads to OctoRPKI crash

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

PT-2021-22384 · Octorpki · Octorpki

Name of the Vulnerable Software and Affected Versions: OctoRPKI affected versions not specified Description: The issue allows an attacker to create a repository that can cause OctoRPKI to run out of memory and crash. This is possible because OctoRPKI tries to load the entire contents of a...