Lucene search
Veracode Vulnerability DatabaseVERACODE:32913HistoryNov 11, 2021 - 7:55 a.m.
Denial Of Service (DoS)
2021-11-1107:55:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cmd/octorpki
denial of service
certificate chain
depth limitation
vulnerability
software
EPSS
0.001
Percentile
45.7%
cmd/octorpki of github.com/cloudflare/cfrpki is vulnerable to denial of service. Due to lack of limitation in the depth of a certificate chain, when a CA creates children in an ad-hoc fashion, it results in never-ending tree traversal.
Related
cve
cve
CVE-2021-3908
2021-11-11 22:15:07
osv
osv
Infinite certificate chain depth results in OctoRPKI running forever
2021-11-10 20:38:53
CVE-2021-3908
2021-11-11 22:15:07
nvd
nvd
CVE-2021-3908
2021-11-11 22:15:07
ubuntucve
ubuntucve
CVE-2021-3908
2021-11-11 00:00:00
debiancve
debiancve
CVE-2021-3908
2021-11-11 22:15:07
github
github
Infinite certificate chain depth results in OctoRPKI running forever
2021-11-10 20:38:53
prion
prion
Design/Logic Flaw
2021-11-11 22:15:00
cvelist
cvelist
openvas
openvas
Debian: Security Advisory (DSA-5041-1)
2022-01-12 00:00:00
nessus
nessus
Debian DSA-5041-1 : cfrpki - security update
2022-01-12 00:00:00
debian
debian
[SECURITY] [DSA 5041-1] cfrpki security update
2022-01-11 21:54:05