CVE-2021-43114: High severity nicmx fort validator vulnerability
Published Nov 9, 2021
·Updated
FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.
Affected Software
3 affected componentsFixes available
debian/fort-validator
1.5.3-1~deb11u11.5.4-11.6.1-1
Fort Validator Project Fort Validator<1.5.2
Debian Debian Linux=11.0
Remediation
Patch Available
Event History
Nov 9, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-43114?
CVE-2021-43114 is considered a critical vulnerability as it can disrupt Route Origin Validation by causing the FORT Validator to crash.
2
How do I fix CVE-2021-43114?
To fix CVE-2021-43114, upgrade the FORT Validator to version 1.5.3 or later.
3
What software versions are affected by CVE-2021-43114?
CVE-2021-43114 affects FORT Validator versions prior to 1.5.2.
4
What are the implications of CVE-2021-43114 for BGP routers?
CVE-2021-43114 can lead BGP routers to lose access to RPKI VRP data, effectively disabling their route origin validation capabilities.
5
Is there a specific Debian version that is affected by CVE-2021-43114?
Yes, Debian GNU/Linux version 11.0 is affected by CVE-2021-43114.