Skip to content
OpenAdvisories

Package · Debian

rpki-client

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.4
    CVE-2021-3909

    Infinite open connection causes OctoRPKI to hang forever

    OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever. Specifically, the repository that OctoRPKI sends HTTP requests to will keep the connection open for a day before a respons…

    Cloudflare octorpki fort-validator cfrpki Debian Go
  • Unscored —
    CVE-2021-43173

    Hanging RRDP request

    In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a…

    NLnet Labs Routinator fort-validator cfrpki Debian Ubuntu
  • High 7.5
    CVE-2021-43172

    Infinite length chain of RRDP repositories

    NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a CA can choose the RRDP repository it wishes to publish its data in. By continuously generating a ne…

    NLnet Labs Routinator routinator rpki-client Debian Ubuntu crates.io