5
CVSSv2

CVE-2021-43114

Published: 09/11/2021 Updated: 07/12/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

FORT Validator versions before 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fort validator project fort validator

debian debian linux 11.0

Vendor Advisories

Multiple vulnerabilities were discovered in the FORT RPKI validator, which could result in denial of service or path traversal For the stable distribution (bullseye), these problems have been fixed in version 153-1~deb11u1 We recommend that you upgrade your fort-validator packages For the detailed security status of fort-validator please refer ...