cbcvebase.
CVE-2024-45236
published 2024-08-24

CVE-2024-45236: An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a signed…

PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.48%
39.0th percentile
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a signed object containing an empty signedAttributes field. Fort accesses the set's elements without sanitizing it first. Because Fort is an RPKI Relying Party, a crash can lead to Route Origin Validation unavailability, which can lead to compromised routing.

Affected

13 ranges
VendorProductVersion rangeFixed in
debianfort-validator< fort-validator 1.5.4-1+deb12u1 (bookworm)fort-validator 1.5.4-1+deb12u1 (bookworm)
nicmxfort-validator< 1.6.31.6.3
nicmxfort-validator>= 0 < 1.5.3-1~deb11u21.5.3-1~deb11u2
nicmxfort-validator>= 0 < 1.5.4-1+deb12u11.5.4-1+deb12u1
nicmxfort-validator>= 0 < 1.6.3-11.6.3-1
nicmxfort-validator>= 0 < 1.6.3-11.6.3-1
nicmxfort-validator>= 0 < 1.5.3-1ubuntu0.11.5.3-1ubuntu0.1
nicmxfort-validator>= 0 < 1.2.0-1ubuntu0.1~esm11.2.0-1ubuntu0.1~esm1
nicmxfort-validator>= 0 < 1.6.1-1ubuntu0.1~esm21.6.1-1ubuntu0.1~esm2
tianocoreedk2>= 0 < 2022.02-3ubuntu0.22.04.52022.02-3ubuntu0.22.04.5
tianocoreedk2>= 0 < 2022.02-3ubuntu0.22.04.42022.02-3ubuntu0.22.04.4
tianocoreedk2>= 0 < 2024.02-2ubuntu0.72024.02-2ubuntu0.7
tianocoreedk2>= 0 < 2024.02-2ubuntu0.62024.02-2ubuntu0.6

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.