Back to feed
EUVD-2021-2345 · Published Nov 10, 2021
Infinite certificate chain depth results in OctoRPKI running forever
OctoRPKI (github.com/cloudflare/cfrpki/cmd/octorpki) does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.
For more information
If you have any questions or comments about this advisory email us at security@cloudflare.com
Technologies
Debian Debian LinuxCloudflare OctorpkiCloudflare Cfrpki
Weaknesses
CWE-835CWE-400
CVSS scores
- v3.15.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Impact
References
Potentially impacted assets
See if this affects your attack surface
