CVE-2021-3911CWE-20

Misconfigured IP address field in ROA leads to OctoRPKI crash

Medium · published November 11, 2021

CVSS v3.1
4.2
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00907 · 59.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-11-11T21:45Z
EPSS history
Timeline
  • 11 NOV 21:45Z
    Misconfigured IP address field in ROA leads to OctoRPKI crash
    cvelistv5