← Database

CVE-2021-3908

MEDIUM CVSS: 5.9 Published: 2021-11-11 Modified: 2026-06-17

Description

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

Affected Platforms

Debian Debian LinuxCloudflare Octorpki

Weakness Type

CWE-400, CWE-835

References