Vulnerability in Fort Validator Project
CVE-2021-43114
FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.
EPSS: 0.011 (62.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Fort_validator_project Fort_validator
- Debian Debian_linux — versions 11.0
- N/a — versions n/a
References
- cve@mitre.org (Patch, Third Party Advisory, Release Notes)
- cve@mitre.org (vendor-advisory, Third Party Advisory)
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
Frequently asked questions
- What is CVE-2021-43114?
- CVE-2021-43114 is a high-severity vulnerability in Fort Validator Project. CVSS score: 7.5/10. Published 2021-11-09.
- How severe is CVE-2021-43114?
- High severity. CVSS v3 base score is 7.5 out of 10.