Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:05:41 +0000 CVE-2021-3761 — OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values https://cve.radiocsirt.org/vuln/cve-2021-3761 <p><strong>Affected:</strong> Cloudflare octorpki</p> <p>Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP &#34;MaxLength&#34; value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as &#34;RPKI invalid&#34;. Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues.</p> <p><strong>Affected:</strong> Cloudflare octorpki</p> <p>Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP &#34;MaxLength&#34; value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as &#34;RPKI invalid&#34;. Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues.</p> https://cve.radiocsirt.org/vuln/cve-2021-3761