Debian/cfrpki: high 7.5
Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validatio
Action: Upgrade cfrpki to 1.3.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0-1 | - |
Fixed versions
| 1.3.0-1 |
Sources
published · modified · JSON