What’s Vulnerable › Products

Cloudflare octorpki vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Cloudflare octorpki version is affected

Latest Cloudflare octorpki vulnerabilities

• CVE-2021-3978 — Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki (CVSS 5.5)
• CVE-2022-3616 — OctoRPKI crash when maximum iterations number is reached (CVSS 7.5)
• CVE-2021-3912 — OctoRPKI crashes when processing GZIP bomb returned via malicious repository (CVSS 6.5)
• CVE-2021-3911 — Misconfigured IP address field in ROA leads to OctoRPKI crash (CVSS 6.5)
• CVE-2021-3910 — NUL character in ROA causes OctoRPKI to crash (CVSS 7.5)
• CVE-2021-3909 — Infinite open connection causes OctoRPKI to hang forever (CVSS 7.5)
• CVE-2021-3908 — Infinite certificate chain depth results in OctoRPKI running forever (CVSS 7.5)
• CVE-2021-3907 — Arbitrary filepath traversal via URI injection (CVSS 9.8)
• CVE-2021-3761 — OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values (CVSS 7.5)