GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-exporter-fips, cert-manager-webhook-pdns, cert-manager-cmctl, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, aws-privateca-issuer, step-issuer-fips, cert-manager-istio-csr, aws-privateca-issuer-fips, cert-exporter, cert-manager, cert-manager-fips,...

Input validation

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

CVE-2021-3761 OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...