VendorsCloudflareoctorpkiall versions
Vulnerabilities

Cloudflare OctoRPKI

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2021-3907
Arbitrary filepath traversal via URI injection
Published 2021-11-11 · Modified
9.8EPSS 0.042
CVE-2021-3909
Infinite open connection causes OctoRPKI to hang forever
Published 2021-11-11 · Modified
7.5EPSS 0.016
CVE-2021-3910
NUL character in ROA causes OctoRPKI to crash
Published 2021-11-11 · Analyzed
7.5EPSS 0.013
CVE-2021-3761
OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values
Published 2021-09-09 · Modified
7.5EPSS 0.012
CVE-2021-3908
Infinite certificate chain depth results in OctoRPKI running forever
Published 2021-11-11 · Modified
7.5EPSS 0.007
CVE-2022-3616
OctoRPKI crash when maximum iterations number is reached
Published 2022-10-28 · Modified
7.5EPSS 0.004
CVE-2021-3978
Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki
Published 2025-01-29 · Analyzed
7.5EPSS 0.001
CVE-2021-3911
Misconfigured IP address field in ROA leads to OctoRPKI crash
Published 2021-11-11 · Modified
6.5EPSS 0.009
CVE-2021-3912
OctoRPKI crashes when processing GZIP bomb returned via malicious repository
Published 2021-11-11 · Modified
6.5EPSS 0.009