Octorpki

Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability.

Published: 2022-10-28T06:24:44.189Z
Updated: 2025-05-05T19:19:50.911Z

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.

Published: 2025-01-29T10:00:53.237Z
Updated: 2025-02-12T16:03:40.405Z

OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory (and thus crash).

Published: 2021-11-11T21:45:24.415Z
Updated: 2024-09-16T23:41:30.954Z

If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.

Published: 2021-11-11T21:45:22.690Z
Updated: 2024-09-16T22:31:10.731Z

OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).

Published: 2021-11-11T21:45:21.177Z
Updated: 2024-09-17T03:27:37.742Z