57 matches found
GHSA-8459-6RC9-8VF8 Path traversal in github.com/cloudflare/cfrpki/cmd/octorpki
Impact In the case that a malicious TAL file is parsed pointing to a repository that provides a malicious ROA file which octorpki downloads, it is possible to bypass the current directory traversal mitigation to allow writing outside of the current directory. Patches No patch release has been mad...
Denial Of Service (DoS)
github.com/cloudflare/cfrpki is vulnerable to denial of service DoS attacks. A malicious user is able to send an encoded null \0 character as an invalid ROA from a repository, causing an application crash...
CVE-2021-3911
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...
CVE-2021-3911
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...
DEBIAN-CVE-2021-3910
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
CVE-2021-3910
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
CVE-2021-3910
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
CVE-2021-3910
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
UBUNTU-CVE-2021-3911
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...
CVE-2021-3911
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...
Design/Logic Flaw
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
Input validation
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...
CVE-2021-3911
CVE-2021-3911 : In Cloudflare’s CFRPKI/OctoRPKI stack, a ROA response containing too many bits for the IP address can cause OctoRPKI to crash, i.e., an availability issue. The vulnerability is triggered when the ROA payload’s IP bit width exceeds expected limits, leading to a crash rather than a ...
CVE-2021-3911
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...
CVE-2021-3911 Misconfigured IP address field in ROA leads to OctoRPKI crash
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...
CVE-2021-3910
CVE-2021-3910 concerns Cloudflare’s CFRpki/OctoRPKI where processing a repository ROA that is just a NUL character can cause a crash. Connected sources confirm this vulnerability in CFRpki/OctoRPKI (e.g., GO-2022-0251 and OSV/NVD copies) and note the issue arises from an invalid ROA payload. The ...
CVE-2021-3910
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
CVE-2021-3910 NUL character in ROA causes OctoRPKI to crash
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
Denial Of Service (DoS)
validator/lib/librpki of github.com/cloudflare/cfrpki is vulnerable to denial of service. The vulnerabiltiy exists becausse an ROA returned with too many bits for the IP address can cause OctoRPKI to crash...
