CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as "RPKI invalid". Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues.

• CWE-787

• https://github.com/cloudflare/cfrpki/security/advisories/GHSA-c8xp-8mf3-62h9Patch, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5041Third Party Advisory
• https://github.com/cloudflare/cfrpki/security/advisories/GHSA-c8xp-8mf3-62h9Patch, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5041Third Party Advisory

Published

Sep 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37600An integer overflow in util-linux through 2.37.1 can potenti…5.5
• CVE-2021-37601muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote a…7.5
• CVE-2021-37604In version 6.5 of Microchip MiWi software and all previous v…7.5
• CVE-2021-37605In version 6.5 Microchip MiWi software and all previous vers…7.5
• CVE-2021-37606Meow hash 0.5/calico does not sufficiently thwart key recove…5.3
• CVE-2021-37608Unrestricted Upload of File with Dangerous Type vulnerabilit…9.8
• CVE-2021-37613Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allow…6.5
• CVE-2021-37614In certain Progress MOVEit Transfer versions before 2021.0.3…8.8
• CVE-2021-37615Exiv2 is a command-line utility and C++ library for reading,…5.5
• CVE-2021-37616Exiv2 is a command-line utility and C++ library for reading,…5.5
• CVE-2021-37617The Nextcloud Desktop Client is a tool to synchronize files …7.3
• CVE-2021-37618Exiv2 is a command-line utility and C++ library for reading,…5.5