Threats tagged 'ghsa-5mgq-44p6-x2pr'

A vulnerability in Fort versions before 1.6.3 allows a malicious RPKI repository, trusted via a Trust Anchor, to serve a malformed resource certificate with an improperly decoded Subject Public Key bit string. When Fort is compiled with OpenSSL libcrypto versions below 3, this leads to unsafe pointer dereferencing and a crash. This crash can cause Route Origin Validation to become unavailable, potentially compromising routing security.