OctoRPKI crashes when max iterations is reached

Mô tả

Tham khảo

• cloudflare/cfrpki security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-3616 · ADVISORY
• cloudflare/cfrpki commit 5f64bcd · WEB
• cloudflare/cfrpki · PACKAGE

Lỗ hổng khác của github.com/cloudflare/cfrpki

• CVE-2021-3978TRUNG BÌNH 5.5When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the p…
• GO-2022-0496Path traversal mitigation bypass in OctoRPKI in github.com/cloudflare/cfrpki
• GHSA-3jhm-87m6-x959CAOPath traversal mitigation bypass in OctoRPKI
• CVE-2021-3912TRUNG BÌNH 6.5OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible…
• CVE-2021-3911TRUNG BÌNH 6.5If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.