Fort Validator Project vulnerabilities
We track 4 vulnerabilities in Fort Validator Project products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2024.
Latest Fort Validator Project vulnerabilities
- 7.5 High severity
fort_validator: NULL Pointer Dereference
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing a bit string that doesn't properly decode into a Subject Public Key. OpenSSL d
- 9.8 Critical severity
fort_validator: Buffer Copy without Checking Size of Input
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing a Key Usage extension composed of more than two bytes of data. Fort writes thi
- 7.5 High severity
An issue was discovered in Fort before 1.6.3.
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a signed object containing an empty signedAttributes field. Fort accesses the set's elements without sanitizing
- 7.5 High severity
fort_validator: NULL Pointer Dereference
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort