Threats tagged 'ghsa-h6q6-xxwv-mm6v'

CVE-2024-45234 is a vulnerability in Fort versions before 1.6.3 where a malicious RPKI repository can serve ROA or Manifest files with non-canonical signedAttrs encoding. This causes Fort's BER decoder to panic due to unexpected non-DER encoding, leading to Route Origin Validation unavailability and potentially compromised routing.