https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T08:58:21.687829+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-3909 CVE-2021-3909 — Infinite open connection causes OctoRPKI to hang forever 2026-10-20T08:58:21.704159+00:00

Affected: Cloudflare octorpki

OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever. Specifically, the repository that OctoRPKI sends HTTP requests to will keep the connection open for a day before a response is returned, but does keep drip feeding new bytes to keep the connection alive.