Skip to content
OpenAdvisories
Critical USN-7813-1 6 CVEs

fort-validator vulnerabilities

Published Oct 8, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Niklas Vogel and Haya Schulmann discovered that FORT Validator did not
perform proper input validation when parsing certain RPKI repository data.
A remote attacker could possibly use this issue to cause FORT Validator to
crash, resulting in a denial of service. (CVE-2024-45234, CVE-2024-45235,
CVE-2024-45236, CVE-2024-45238, CVE-2024-45239)

Niklas Vogel and Haya Schulmann discovered that FORT Validator did not
perform proper input validation when parsing resource certificates. A
remote attacker could possibly use this issue to cause a denial of service
or execute arbitrary code. (CVE-2024-45237)

Koen van Hove discovered that FORT Validator did not limit the duration of
data transfers when fetching RPKI repository data. A remote attacker could
possibly use this issue to cause FORT Validator to consume excessive
resources, resulting in a denial of service. (CVE-2024-48943)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS fort-validator 1.5.3-1ubuntu0.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS fort-validator 1.2.0-1ubuntu0.1~esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS fort-validator 1.6.1-1ubuntu0.1~esm2

Vulnerabilities 6

References

  • report
    https://ubuntu.com/security/CVE-2024-45234
  • report
    https://ubuntu.com/security/CVE-2024-45235
  • report
    https://ubuntu.com/security/CVE-2024-45236
  • report
    https://ubuntu.com/security/CVE-2024-45237
  • report
    https://ubuntu.com/security/CVE-2024-45238
  • report
    https://ubuntu.com/security/CVE-2024-45239
  • report
    https://ubuntu.com/security/CVE-2024-48943