Cloudflare Octorpki vulnerabilities

• cloudflare octorpki OctoRPKI crash when maximum iterations number is reached CVE-2022-3616 Fix available 5.4 MediumOctober 28, 2022
• cloudflare octorpki Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki CVE-2021-3978 Fix available 7.5 HighNovember 19, 2021
• cloudflare octorpki, debian linux +1 more OctoRPKI crashes when processing GZIP bomb returned via malicious repository CVE-2021-3912 Fix available 4.2 MediumNovember 10, 2021
• cloudflare octorpki, debian linux +1 more Infinite certificate chain depth results in OctoRPKI running forever CVE-2021-3908 Fix available 5.9 MediumNovember 10, 2021
• cloudflare octorpki, debian linux +1 more Infinite open connection causes OctoRPKI to hang forever CVE-2021-3909 Fix available 4.4 MediumNovember 10, 2021
• cloudflare octorpki, debian linux +1 more NUL character in ROA causes OctoRPKI to crash CVE-2021-3910 Fix available 4.4 MediumNovember 10, 2021
• cloudflare octorpki, debian linux +1 more Arbitrary filepath traversal via URI injection CVE-2021-3907 Fix available 7.4 HighNovember 10, 2021
• cloudflare octorpki, debian linux +1 more Misconfigured IP address field in ROA leads to OctoRPKI crash CVE-2021-3911 Fix available 4.2 MediumNovember 10, 2021
• cloudflare octorpki, debian linux +1 more OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values CVE-2021-3761 Fix available 7.5 HighSeptember 7, 2021