Skip to content
OpenAdvisories

Package · Ubuntu

cfrpki

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.4
    CVE-2022-3616

    OctoRPKI crash when maximum iterations number is reached

    Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika M…

    Cloudflare octorpki cfrpki github.com/cloudflare/cfrpki Debian Ubuntu Go
  • High 7.5
    CVE-2021-43172

    Infinite length chain of RRDP repositories

    NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a CA can choose the RRDP repository it wishes to publish its data in. By continuously generating a ne…

    NLnet Labs Routinator routinator rpki-client Debian Ubuntu crates.io