GHSA-w6ww-fmfx-2x22MediumCVSS 4.2

Misconfigured IP address field in ROA leads to OctoRPKI crash

Published
November 10, 2021
Last Modified
February 14, 2023

🔗 CVE IDs covered (1)

CVE-2021-3911 →

📋 Description

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

Patches

For more information

If you have any questions or comments about this advisory email us at [email protected]

🎯 Affected products1

  • go/github.com/cloudflare/cfrpki:< 1.4.0

🔗 References (6)