CVE-2020-16164

Katalog CVE

CVSS 7.4 · High EPSS 0,91%

Kerentanan Improper Certificate Validation pada ripe rpki validator 3. Skor CVSS 3.1 7.4 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view. NOTE: some third parties may regard this as a preferred behavior, not a vulnerability

Rincian

Terbit di NVD

30 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.4 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-295: Improper Certificate Validation

EPSS (30 hari)

0,91% peluang dieksploitasi; lebih tinggi dari 58,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/RIPE-NCC/rpki-validator-3/issues/158 issue tracking · advisory pihak ketiga
• https://github.com/RIPE-NCC/rpki-validator-3/issues/232 issue tracking · advisory pihak ketiga
• https://github.com/RIPE-NCC/rpki-validator-3/security/advisories/GHSA-q76j-58cx-wp5v advisory pihak ketiga