Fixing Recent Validation Vulnerabilities in OctoRPKI
Nov 12, 2021David Haynes

Summary
This post addresses recent vulnerabilities discovered in RPKI validation software, specifically within Cloudflare's OctoRPKI tool. It details the nature of these vulnerabilities (arbitrary file writes and uncontrolled resource consumption) and the mitigations implemented in version 1.4.0. The post reinforces Cloudflare's commitment to securing BGP routing through RPKI and highlights their proactive approach to addressing security research in this critical area.