CVE-2024-45237

CVE-2024-45237 describes a critical buffer overflow vulnerability in Fort before version 1.6.3, specifically affecting the nicmx fort-validator. This flaw allows a malicious RPKI repository to serve a resource certificate with an oversized Key Usage extension, leading to a buffer overflow when Fort attempts to write this data into a fixed-size buffer without proper length validation. The vulnerability carries a CVSS score of 9.8 (CRITICAL), indicating a severe risk. It is remotely exploitable (AV:N) with low attack complexity (AC:L) and requires no user interaction (UI:N), potentially leading to complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, including research detailing potential Remote Code Execution (RCE) implications.