MEDIUM 4.2 Go
Misconfigured IP address field in ROA leads to OctoRPKI crash
GHSA-w6ww-fmfx-2x22 · CVE-2021-3911 · GO-2022-0252
Published · Modified
Description
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.
Patches
For more information
If you have any questions or comments about this advisory email us at security@cloudflare.com
References
- WEB https://github.com/cloudflare/cfrpki/security/advisories/GHSA-w6ww-fmfx-2x22
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2021-3911
- WEB https://github.com/cloudflare/cfrpki/commit/2882307febd66801de97b2a2ce4d93fe58132005
- PACKAGE https://github.com/cloudflare/cfrpki
- WEB https://pkg.go.dev/vuln/GO-2022-0252
- WEB https://www.debian.org/security/2022/dsa-5041
Ready to move
Start Securing
Free, no credit card | First findings in minutes