Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37717
HistoryOct 30, 2022 - 2:01 p.m.

Denial Of Service (DoS)

2022-10-3014:01:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
denial of service
vulnerability
validationloop
cas
application crash
max iterations
cloudflare
cfrpki

EPSS

0.001

Percentile

38.4%

github.com/cloudflare/cfrpki is vulnerable to denial of service. The vulnerability exists because the validationLoop function in octorpki.go exceeds the max iterations parameter when creating long chains of CAs, allowing an attacker to crash the application.

EPSS

0.001

Percentile

38.4%