Go/github.com/cloudflare/cfrpki CVE-2021-3761: high 7.5, EPSS 1.22%
OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values
Action: Upgrade github.com/cloudflare/cfrpki to 1.3.0 or later.
go get github.com/cloudflare/cfrpki@v1.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0 | - |
Fixed versions
| 1.3.0 |
Sources
- osv: GHSA-c8xp-8mf3-62h9
- https://github.com/cloudflare/cfrpki/security/advisories/GHSA-c8xp-8mf3-62h9
- https://nvd.nist.gov/vuln/detail/CVE-2021-3761
- https://github.com/cloudflare/cfrpki/pull/90
- https://github.com/cloudflare/cfrpki/commit/a8db4e009ef217484598ba1fd1c595b54e0f6422
- https://github.com/cloudflare/cfrpki/releases/tag/v1.3.0
- https://pkg.go.dev/vuln/GO-2022-0246
- https://www.debian.org/security/2022/dsa-5041
CVE-2021-3761 · published · modified · JSON