OC
Product
OctoRPKI
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add OctoRPKI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3912 | 6.5 | Nov 11 | OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes… Affected: before 1.3.0 |
| CVE-2021-3911 | 6.5 | Nov 11 | If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash Affected: before 1.3.0 |
| CVE-2021-3978 | 5.5 | Jan 29 | When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root Affected: before 1.4.2 |
Showing 3