CVE-2021-43114
Last modified
CVE-2021-43114 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fort Validator Project | Fort Validator | < 1.5.2 |
| Debian | Debian Linux | 11.0 |
References
- https://github.com/NICMx/FORT-validator/releases/tag/1.5.2Patch, Release Notes, Third Party Advisory
- https://www.debian.org/security/2021/dsa-5033Third Party Advisory
- https://github.com/NICMx/FORT-validator/releases/tag/1.5.2Patch, Release Notes, Third Party Advisory
- https://www.debian.org/security/2021/dsa-5033Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-43114?
How severe is CVE-2021-43114?
How do I fix CVE-2021-43114?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-43105A vulnerability in the bailiwick checking function in Techni…4.3
- CVE-2021-43106A Header Injection vulnerability exists in Compass Plus Tran…6.1
- CVE-2021-43109An SQL Injection vulnerability exits in PuneethReddyHC onlin…7.5
- CVE-2021-4311A vulnerability classified as problematic was found in Talen…9.8
- CVE-2021-43110An Access Conrol vulnerability exists in PuneethReddyHC onli…9.8
- CVE-2021-43113iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 al…9.8
- CVE-2021-43116An Access Control vulnerability exists in Nacos 2.0.3 in the…8.8
- CVE-2021-43117fastadmin v1.2.1 is affected by a file upload vulnerability …9.8
- CVE-2021-43118A Remote Command Injection vulnerability exists in DrayTek V…9.8
- CVE-2021-4312** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1
- CVE-2021-43129A bypass exists for Desire2Learn/D2L Brightspace’s “Disable …6.5
- CVE-2021-4313A vulnerability was found in NethServer phonenehome. It has …9.8
Are you affected by CVE-2021-43114?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
