Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2021-3908

Infinite certificate chain depth results in OctoRPKI running forever

Description

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloudflare octorpki

  • unspecified to < 1.4.0affected

References