Lucene search
CloudflareCVELIST:CVE-2021-3910HistoryNov 11, 2021 - 9:45 p.m.
CVE-2021-3910 NUL character in ROA causes OctoRPKI to crash
2021-11-1121:45:21
CWE-20
cloudflare
www.cve.org
6
octorpki
cve-2021-3910
roa
CVSS3
4.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
45.7%
OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).
CNA Affected
[
{
"product": "octorpki",
"vendor": "Cloudflare",
"versions": [
{
"lessThan": "1.4.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
ubuntucve
ubuntucve
CVE-2021-3910
2021-11-11 00:00:00
nvd
nvd
CVE-2021-3910
2021-11-11 22:15:07
github
github
NUL character in ROA causes OctoRPKI to crash
2021-11-10 20:15:06
cve
cve
CVE-2021-3910
2021-11-11 22:15:07
debiancve
debiancve
CVE-2021-3910
2021-11-11 22:15:07
prion
prion
Design/Logic Flaw
2021-11-11 22:15:00
veracode
veracode
Denial Of Service (DoS)
2021-11-12 09:55:05
osv
osv
NUL character in ROA causes OctoRPKI to crash
2021-11-10 20:15:06
Panic on NUL character in ROA in github.com/cloudflare/cfrpki
2022-07-15 23:07:28
CVE-2021-3910
2021-11-11 22:15:07
openvas
openvas
Debian: Security Advisory (DSA-5041-1)
2022-01-12 00:00:00
nessus
nessus
Debian DSA-5041-1 : cfrpki - security update
2022-01-12 00:00:00
debian
debian
[SECURITY] [DSA 5041-1] cfrpki security update
2022-01-11 21:54:05
CVSS3
4.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
8.2
Confidence
High
EPSS
0.001
Percentile
45.7%
Related for CVELIST:CVE-2021-3910