
11/12/2021 · David Haynes
What this post added
This post addresses recent vulnerabilities discovered in RPKI validation software, specifically within Cloudflare's OctoRPKI tool. It details the nature of these vulnerabilities (arbitrary file writes and uncontrolled resource consumption) and the mitigations implemented in version 1.4.0. The post reinforces Cloudflare's commitment to securing BGP routing through RPKI and highlights their proactive approach to addressing security research in this critical area.