Misconfigured IP address field in ROA leads to OctoRPKI crash

MEDIO 6.5CVE-2021-3911 · GHSA-w6ww-fmfx-2x22 · GO-2022-0252 · Published 11/11/2021 · updated 17/06/2026

En resumen

CVE-2021-3911 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a github.com/cloudflare/cfrpki, octorpki (cloudflare).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.91%, mayor que el 59.9% de las vulnerabilidades.
Solución: actualizar a 1.4.0, 1.3.0 o posterior.

Package	Affected versions	Patched versions
github.com/cloudflare/cfrpki Go	`< 1.4.0`	`1.4.0`
octorpki cloudflare	`< 1.3.0`	`1.3.0`

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

If you have any questions or comments about this advisory email us at [email protected]

NVD description

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.4.0

1.4.0

< 1.3.0

1.3.0

Description

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

If you have any questions or comments about this advisory email us at [email protected]

NVD description

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

Más vulnerabilidades de github.com/cloudflare/cfrpki

Ver todo →