Misconfigured IP address field in ROA leads to OctoRPKI crash

MEDIO 6.5CVE-2021-3911 · GHSA-w6ww-fmfx-2x22 · GO-2022-0252 · Published 11/11/2021 · updated 17/06/2026

In breve

CVE-2021-3911 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda github.com/cloudflare/cfrpki, octorpki (cloudflare).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.91%, superiore al 59.9% delle vulnerabilità.
Correzione: aggiornare a 1.4.0, 1.3.0 o successiva.

Package	Affected versions	Patched versions
github.com/cloudflare/cfrpki Go	`< 1.4.0`	`1.4.0`
octorpki cloudflare	`< 1.3.0`	`1.3.0`

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

If you have any questions or comments about this advisory email us at [email protected]

NVD description

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.4.0

1.4.0

< 1.3.0

1.3.0

Description

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

If you have any questions or comments about this advisory email us at [email protected]

NVD description

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

Altre vulnerabilità di github.com/cloudflare/cfrpki

Vedi tutto →