PT-2021-7308 · Octorpki · Octorpki

Haynespls · Published 2021-11-10 · Updated 2022-07-15 · CVE-2021-3911

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OctoRPKI (affected versions not specified)

Description The issue is related to the RPKI-validator in OctoRPKI, which lacks proper checking of returned data when generating ROA (Route Origin Authorisation) objects. If a repository returns an ROA with an IP address containing too many bits, OctoRPKI will crash. This could potentially allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unchecked Return Value

Weakness Enumeration

CWE-20

CWE-252

Related Identifiers

BDU:2022-05571

CVE-2021-3911

DSA-5041-1

GHSA-W6WW-FMFX-2X22

GO-2022-0252

Affected Products

Octorpki

References · 22

• https://security-tracker.debian.org/tracker/DSA-5041-1 · Vendor Advisory
• https://debian.org/security/2022/dsa-5041 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0252 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w6ww-fmfx-2x22 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3911 · Security Note
• https://osv.dev/vulnerability/DSA-5041-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3911 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3911 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05571 · Security Note
• https://ubuntu.com/security/CVE-2021-3911 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-3911 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3911 · Security Note
• https://osv.dev/vulnerability/CVE-2021-3911 · Vendor Advisory
• https://github.com/cloudflare/cfrpki · Note
• https://github.com/cloudflare/cfrpki/security/advisories/GHSA-w6ww-fmfx-2x22 · Note