What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-3616.

What is the impact of this vulnerability?

This vulnerability can cause OctoRPKI to exceed its max iterations parameter, leading to a denial of service.

What is the severity rating for this vulnerability?

The severity rating for this vulnerability is high, with a value of 7.5.

How can attackers exploit this vulnerability?

Attackers can create long chains of CAs to trigger the vulnerability and cause a denial of service.

Is there a patch available for this vulnerability?

Yes, a patch is available for this vulnerability in version 1.4.4 of the Cloudflare Octorpki package.

Vulnerability/
CVE-2022-3616

high

7.5

CWE

754 834

28/10/2022

31/10/2022

3/8/2024

CVE-2022-3616: OctoRPKI crash when maximum iterations number is reached

First published: Fri Oct 28 2022(Updated: )

### Impact Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability. ### Specific Go Packages Affected github.com/cloudflare/cfrpki/cmd/octorpki ### Patches This issue is fixed in v1.4.4 ### Workarounds None.

Credit: cna@cloudflare.com cna@cloudflare.com

Affected Software	Affected Version	How to fix
go/github.com/cloudflare/cfrpki	<=1.4.3	1.4.4
Cloudflare Octorpki	<1.4.4

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-3616.
What is the impact of this vulnerability?
This vulnerability can cause OctoRPKI to exceed its max iterations parameter, leading to a denial of service.
What is the severity rating for this vulnerability?
The severity rating for this vulnerability is high, with a value of 7.5.
How can attackers exploit this vulnerability?
Attackers can create long chains of CAs to trigger the vulnerability and cause a denial of service.
Is there a patch available for this vulnerability?
Yes, a patch is available for this vulnerability in version 1.4.4 of the Cloudflare Octorpki package.

collector/github-advisory-latest
alias/GHSA-pmw9-567p-68pc
alias/CVE-2022-3616
collector/github-advisory
collector/nvd-index
collector/nvd-cve
agent/weakness
agent/references
agent/author
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/title
agent/description
agent/first-publish-date
agent/tags
agent/event
package-manager/go
vendor/cloudflare
canonical/cloudflare octorpki

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.