CVE-2021-3911

Name of the Vulnerable Software and Affected Versions OctoRPKI (affected versions not specified)

Description The issue is related to the RPKI-validator in OctoRPKI, which lacks proper checking of returned data when generating ROA (Route Origin Authorisation) objects. If a repository returns an ROA with an IP address containing too many bits, OctoRPKI will crash. This could potentially allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.