Skip to main content

Excessive Iteration


Severity High
Score 7.5/10


Attackers can create long chains of CAs that would lead to OctoRPKI versions through 1.4.3 exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service.

  • LOW
  • NONE
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-834 - Excessive Iteration

The software performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Advisory Timeline

  • Published