-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from uncontrolled CA chain processing in CaCert::chain. The commit 2f1c473 introduced a 'max_ca_depth' parameter and chain length tracking to prevent infinite chains. In pre-0.10.2 versions, this function lacked: 1) the chain_len counter to track depth, and 2) the check against max_ca_depth. This allowed infinite recursion through parent-child CA relationships without termination. The CWE-674/835 mappings confirm this is an uncontrolled recursion/infinite loop scenario directly addressed by adding depth limits in this function.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| routinator | rust | < 0.10.2 | 0.10.2 |