Non notée
CVE-2021-41531 NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length…
Description
NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Routinator 0.9 | premières → 0.9.0 | Pas de correctif indiqué |
Autres CVE de Routinator
Les 20 CVE de Routinator →
CVE-2026-72758
When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the…
7.5
Élevée
CVE-2026-72757
Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving…
5.3
Moyenne
CVE-2026-72756
Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such…
7.5
Élevée
CVE-2026-72755
Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a…
3.8
Faible