CVE-2020-16164

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view. NOTE: some third parties may regard this as a preferred behavior, not a vulnerability

• CWE-295

• https://github.com/RIPE-NCC/rpki-validator-3/issues/158Issue Tracking, Third Party Advisory
• https://github.com/RIPE-NCC/rpki-validator-3/issues/232Issue Tracking, Third Party Advisory
• https://github.com/RIPE-NCC/rpki-validator-3/security/advisories/GHSA-q76j-58cx-wp5vThird Party Advisory
• https://github.com/RIPE-NCC/rpki-validator-3/issues/158Issue Tracking, Third Party Advisory
• https://github.com/RIPE-NCC/rpki-validator-3/issues/232Issue Tracking, Third Party Advisory
• https://github.com/RIPE-NCC/rpki-validator-3/security/advisories/GHSA-q76j-58cx-wp5vThird Party Advisory

Published

Jul 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16159GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segf…9.1
• CVE-2020-1616Due to insufficient server-side login attempt limit enforcem…5.3
• CVE-2020-16160GoPro gpmf-parser 1.5 has a division-by-zero vulnerability i…7.5
• CVE-2020-16161GoPro gpmf-parser 1.5 has a division-by-zero vulnerability i…7.5
• CVE-2020-16162An issue was discovered in RIPE NCC RPKI Validator 3.x throu…7.5
• CVE-2020-16163An issue was discovered in RIPE NCC RPKI Validator 3.x befor…9.1
• CVE-2020-16165The DAO/DTO implementation in SpringBlade through 2.7.1 allo…9.8
• CVE-2020-16166The Linux kernel through 5.7.11 allows remote attackers to m…3.7
• CVE-2020-16167Missing Authentication for Critical Function in temi Robox O…9.1
• CVE-2020-16168Origin Validation Error in temi Robox OS prior to 120, temi …6.5
• CVE-2020-16169Authentication Bypass Using an Alternate Path or Channel in …9.8
• CVE-2020-1617This issue occurs on Juniper Networks Junos OS devices which…7.5