CVE-2021-43114

FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate

High · published November 9, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01141 · 66.4th percentile
Published
2021-11-09T00:00Z
EPSS history
Timeline
  • 09 NOV 00:00Z
    FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate
    cvelistv5