go

github.com/cloudflare/cfrpki

View on go registry
21 Total advisories
21 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 4.2
Go

CVE-2021-3911

Misconfigured IP address field in ROA leads to OctoRPKI crash

MEDIUM 5.4
Go

CVE-2022-3616

OctoRPKI crashes when max iterations is reached

HIGH 7.5
Go

CVE-2021-3910

NUL character in ROA causes OctoRPKI to crash

MEDIUM 4.2
Go

CVE-2021-3912

OctoRPKI crashes when processing GZIP bomb returned via malicious repository

MEDIUM 5.9
Go

CVE-2021-3908

Infinite certificate chain depth results in OctoRPKI running forever

MEDIUM 4.4
Go

CVE-2021-3909

Infinite open connection causes OctoRPKI to hang forever

HIGH 7.5
Go

CVE-2021-3761

OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values

UNKNOWN
Go

CVE-2022-3616

OctoRPKI crashes when max iterations is reached in github.com/cloudflare/cfrpki

UNKNOWN
Go

CVE-2021-3908

Infinite certificate chain depth results in OctoRPKI running forever in github.com/cloudflare/cfrpki

UNKNOWN
Go

CVE-2021-3909

Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki

UNKNOWN
Go

CVE-2021-3978

Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki in github.com/cloudflare/cfrpki

UNKNOWN
Go

GHSA-3jhm-87m6-x959

Path traversal mitigation bypass in OctoRPKI in github.com/cloudflare/cfrpki

UNKNOWN
Go

GO-2022-0496

Path traversal mitigation bypass in OctoRPKI

UNKNOWN
Go

CVE-2021-3907

Directory traversal in manifest path extraction in github.com/cloudflare/cfrpki

HIGH 7.4
Go

CVE-2021-3907

Arbitrary filepath traversal via URI injection

HIGH 7.5
Go

CVE-2021-3978

Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki

UNKNOWN
Go

CVE-2021-3907

Path traversal in github.com/cloudflare/cfrpki/cmd/octorpki

UNKNOWN
Go

CVE-2021-3912

Resource exhaustion via GZIP bomb in github.com/cloudflare/cfrpki

UNKNOWN
Go

CVE-2021-3911

Panic on misconfigured IP address in github.com/cloudflare/cfrpki

UNKNOWN
Go

CVE-2021-3910

Panic on NUL character in ROA in github.com/cloudflare/cfrpki

UNKNOWN
Go

CVE-2021-3761

Insufficient validation in github.com/cloudflare/cfrpki

Ready to move

Start Securing

Free, no credit card | First findings in minutes