Cloudflare OctoRPKI

• CVE-2021-3978 High 7.5 Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki 0.1%
• CVE-2022-3616 Medium 5.4 OctoRPKI crash when maximum iterations number is reached 0.5%
• CVE-2021-3912 Medium 4.2 OctoRPKI crashes when processing GZIP bomb returned via malicious repository 0.9%
• CVE-2021-3911 Medium 4.2 Misconfigured IP address field in ROA leads to OctoRPKI crash 0.9%
• CVE-2021-3910 Medium 4.4 NUL character in ROA causes OctoRPKI to crash 1.2%
• CVE-2021-3909 Medium 4.4 Infinite open connection causes OctoRPKI to hang forever 1.6%
• CVE-2021-3908 Medium 5.9 Infinite certificate chain depth results in OctoRPKI running forever 0.7%
• CVE-2021-3907 High 7.4 Arbitrary filepath traversal via URI injection 4.2%
• CVE-2021-3761 High 7.5 OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values 1.2%