Denial Of Service (DoS)

github.com/cloudflare/cfrpki is vulnerable to denial of service DoS attacks. A malicious user is able to send an encoded null \0 character as an invalid ROA from a repository, causing an application crash...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

DEBIAN-CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

UBUNTU-CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

Input validation

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

Design/Logic Flaw

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3911

CVE-2021-3911 : In Cloudflare’s CFRPKI/OctoRPKI stack, a ROA response containing too many bits for the IP address can cause OctoRPKI to crash, i.e., an availability issue. The vulnerability is triggered when the ROA payload’s IP bit width exceeds expected limits, leading to a crash rather than a ...

CVE-2021-3911

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3911 Misconfigured IP address field in ROA leads to OctoRPKI crash

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash...

CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

CVE-2021-3910

CVE-2021-3910 concerns Cloudflare’s CFRpki/OctoRPKI where processing a repository ROA that is just a NUL character can cause a crash. Connected sources confirm this vulnerability in CFRpki/OctoRPKI (e.g., GO-2022-0251 and OSV/NVD copies) and note the issue arises from an invalid ROA payload. The ...

CVE-2021-3910 NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

Denial Of Service (DoS)

validator/lib/librpki of github.com/cloudflare/cfrpki is vulnerable to denial of service. The vulnerabiltiy exists becausse an ROA returned with too many bits for the IP address can cause OctoRPKI to crash...

GHSA-5MXH-2QFV-4G7J NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...