CVE-2021-3978中 5.5When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the p…
CVE-2022-3616高 7.5Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause th…
CVE-2021-3912中 6.5OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible…
CVE-2021-3911中 6.5If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.