Threats tagged 'ghsa-wpp2-87q7-h53v'

CVE-2024-45237 is a critical buffer overflow vulnerability in Fort versions before 1.6.3. It arises when a malicious RPKI repository, trusted via a Trust Anchor, serves a resource certificate with a Key Usage extension exceeding two bytes. Fort improperly writes this extension into a fixed 2-byte buffer without length validation, causing a buffer overflow.