CVE-2021-3908

Medium

Description

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

SeverityMedium

CVSS5.9

Exploit probability—

Product

Cloudflare Octorpki

PublishedNov 11, 2021

First seenNov 11, 2021

Weakness typeCWE-400Uncontrolled resource consumption

How to fix

Update

cloudflare octorpki1.3.0 or later
github.com/cloudflare/cfrpki1.4.0 or later

Vendor advisories

debian.org/security/2022/dsa-5041

Affected products

Product	Affected versions	Fixed in
cloudflare octorpki	v < 1.3.0	1.3.0
debian debian_linux	11.0	—
github.com/cloudflare/cfrpkiGo	v < 1.4.0	1.4.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.