CVE-2021-43114: Debian Linux

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.

Affected products

• Debian Debian Linux: version 11.0 only
• Fort Validator Project Fort Validator: before 1.5.2 (fixed in 1.5.2)

Published 2021-11-09. Last modified 2026-06-17.