CVE-2024-45237

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing a Key Usage extension composed of more than two bytes of data. Fort writes this string into a 2-byte buffer without properly sanitizing its length, leading to a buffer overflow.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://nicmx.github.io/FORT-validator/CVE.html	Patch Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nicmx:fort-validator:*:*:*:*:*:*:*:*

History

27 Aug 2024, 15:48

Type	Values Removed	Values Added
First Time		Nicmx fort-validator Nicmx
CPE		cpe:2.3:a:nicmx:fort-validator::::::::
References	~~() https://nicmx.github.io/FORT-validator/CVE.html -~~	() https://nicmx.github.io/FORT-validator/CVE.html - Patch, Third Party Advisory

26 Aug 2024, 20:35

Type	Values Removed	Values Added
CWE		CWE-120
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8

26 Aug 2024, 12:47

Type	Values Removed	Values Added
Summary		(es) Se descubrió un problema en Fort antes de la versión 1.6.3. Un repositorio RPKI malicioso que desciende de un Trust Anchor (confiable) puede servir (a través de rsync o RRDP) un certificado de recurso que contenga una extensión de uso de clave compuesta por más de dos bytes de datos. Fort escribe esta cadena en un búfer de 2 bytes sin desinfectar adecuadamente su longitud, lo que provoca un desbordamiento del búfer.

24 Aug 2024, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-24 23:15

Updated : 2024-08-27 15:48

NVD link : CVE-2024-45237

Mitre link : CVE-2024-45237

CVE.ORG link : CVE-2024-45237

JSON object : View

Products Affected

nicmx

fort-validator

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2024-45237", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-08-24T23:15:04.243", "references": [{"url": "https://nicmx.github.io/FORT-validator/CVE.html", "tags": ["Patch", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-120"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing a Key Usage extension composed of more than two bytes of data. Fort writes this string into a 2-byte buffer without properly sanitizing its length, leading to a buffer overflow."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Fort antes de la versi\u00f3n 1.6.3. Un repositorio RPKI malicioso que desciende de un Trust Anchor (confiable) puede servir (a trav\u00e9s de rsync o RRDP) un certificado de recurso que contenga una extensi\u00f3n de uso de clave compuesta por m\u00e1s de dos bytes de datos. Fort escribe esta cadena en un b\u00fafer de 2 bytes sin desinfectar adecuadamente su longitud, lo que provoca un desbordamiento del b\u00fafer."}], "lastModified": "2024-08-27T15:48:34.030", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nicmx:fort-validator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B6DF9BD-7BC4-4AFF-8E93-6810EC99D678", "versionEndExcluding": "1.6.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}