OC
Product
OctoRPKI
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add OctoRPKI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3616 | 7.5 | Oct 28 | OctoRPKI crash when maximum iterations number is reached Affected: before <1.4.4 |
| CVE-2021-3910 | 7.5 | Nov 11 | OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character) Affected: before 1.4.0 |
| CVE-2021-3909 | 7.5 | Nov 11 | OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever Affected: before 1.3.0 |
| CVE-2021-3908 | 7.5 | Nov 11 | OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end Affected: before 1.3.0 |
| CVE-2021-3761 | 7.5 | Sep 9 | Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate Affected: before 1.3.0 |
Showing 5