Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/cloudflare/cfrpki/security/advisories/GHSA-pmw9-567p-68pc | Third Party Advisory |
Configurations
History
29 Mar 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability. |
31 Oct 2022, 16:58
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:cloudflare:octorpki:*:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/cloudflare/cfrpki/security/advisories/GHSA-pmw9-567p-68pc - Third Party Advisory | |
| CWE | CWE-834 |
28 Oct 2022, 08:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-28 07:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-3616
Mitre link : CVE-2022-3616
CVE.ORG link : CVE-2022-3616
JSON object : View
Products Affected
cloudflare
- octorpki