OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory (and thus crash).
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: cloudflare

Published: 2021-11-11T21:45:24.415500Z

Updated: 2024-09-16T23:41:30.954Z

Reserved: 2021-10-26T00:00:00

Link: CVE-2021-3912

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-11-11T22:15:08.077

Modified: 2024-11-21T06:22:45.710

Link: CVE-2021-3912

cve-icon Redhat

No data.