Описание
OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.3.0 (исключая)
cpe:2.3:a:cloudflare:octorpki:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00286
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-400
CWE-835
Связанные уязвимости
CVSS3: 5.9
ubuntu
около 4 лет назад
OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.
CVSS3: 5.9
debian
около 4 лет назад
OctoRPKI does not limit the depth of a certificate chain, allowing for ...
CVSS3: 5.9
github
около 4 лет назад
Infinite certificate chain depth results in OctoRPKI running forever
EPSS
Процентиль: 52%
0.00286
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-400
CWE-835