PT-2022-23238 · Octorpki+1 · Octorpki+1

Mskowroncf · Published 2022-10-28 · Updated 2024-08-21 · CVE-2022-3616

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions OctoRPKI versions prior to 1.4.4

Description Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter, causing the program to crash and preventing it from finishing the validation, resulting in a denial of service. This issue was discovered and reported by Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE.

Recommendations For versions prior to 1.4.4, update to version 1.4.4 to resolve the issue. As a temporary workaround, consider restricting the length of CA chains to prevent exceeding the max iterations parameter until a patch is applied.

Fix

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

CWE-834

Related Identifiers

CVE-2022-3616

GHSA-PMW9-567P-68PC

GO-2022-1089

Affected Products

Debian

Octorpki

References · 12

• https://cve.org/CVERecord?id=CVE-2022-3616 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-3616 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-1089 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3616 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3616 · Security Note
• https://ubuntu.com/security/CVE-2022-3616 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3616 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-pmw9-567p-68pc · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3616 · Vendor Advisory
• https://github.com/cloudflare/cfrpki · Note
• https://github.com/cloudflare/cfrpki/commit/5f64bcd13477b29cd7ddff6fff3c65dfac3423ca · Note
• https://github.com/cloudflare/cfrpki/security/advisories/GHSA-pmw9-567p-68pc · Note