7160 matches found
CVE-2024-45234
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...
CVE-2024-45235
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizi...
CVE-2024-45238
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing a bit string that doesn't properly decode into a Subject Public Key. OpenSSL does not report this problem during parsin...
CVE-2024-45239
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first. Because Fort is an RPKI Relying Party, ...
CVE-2024-45239
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first. Because Fort is an RPKI Relying Party, ...
CVE-2024-45239: NULL Pointer Dereference
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first. Because Fort is an RPKI Relying Party, ...
PT-2024-31496
Name of the Vulnerable Software and Affected Versions Fort versions prior to 1.6.3 Description An issue was discovered in Fort where a malicious RPKI repository that descends from a trusted Trust Anchor can serve an ROA or a Manifest containing a null eContent field via rsync or RRDP. Fort...
CVE-2024-45235
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizi...
CVE-2024-45234
Fort validator (Fort) before 1.6.3 is affected by CVE-2024-45234 and related CVEs. A malicious RPKI repository descending from a trusted Trust Anchor can serve ROA/Manifest data with non-canonical signedAttrs, bypassing the BER/DER handling and causing a panic that can make Route Origin Validatio...
CVE-2024-45235
The FORT Validator (versions before 1.6.3) is vulnerable to a crash due to improper input validation when parsing RPKI repository data served via rsync or RRDP . A malicious repository descending from a trusted Trust Anchor can serve a resource certificate where the Authority Key Identifier exten...
CVE-2024-45238
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing a bit string that doesn't properly decode into a Subject Public Key. OpenSSL does not report this problem during parsin...
Windows RRAS Disclosure Sensitive Information
The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Windows RRAS Routing Remote Access Code Execution
The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to buffer overflow in the “heap”. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Windows Routing and Remote Access Code Execution
The vulnerability of the Windows Routing and Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
IP Routing Management Snapin Code Execution
The vulnerability of the IP Routing Management Snapin for Windows operating systems is related to an overflow in the buffer in the “bucket”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
IP Routing Management Snapin Code Execution
The vulnerability of the IP Routing Management Snapin for Windows operating systems is related to an overflow in the buffer in the “bucket”. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
IP Routing Management Snapin Code Execution
The vulnerability of the IP Routing Management Snapin for Windows operating systems is related to an overflow in the buffer in the “bucket”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
An AWS Configuration Issue Could Expose Thousands of Web Apps
Amazon has updated its instructions for how customers should more securely implement AWS's traffic-routing service known as Application Load Balancer, but it's not clear everyone will get the memo...
