Advisories · Technology
NLnet Labs Routinator.
Every CVE that names NLnet Labs Routinator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Routinator may exit on malformed ranges
- NLnet Labs Routinator
- CWE-755
- CVSS 5.3 Medium
Routinator HTTP server becomes unavailable with many unclosed connections
- NLnet Labs Routinator
- CWE-755
- CVSS 7.5 High
Routinator exits on malformed rsync URIs
- NLnet Labs Routinator
- CWE-755
- CVSS 3.8 Low
Routinator stores TA certificate in cache without validation
- NLnet Labs Routinator
- CWE-755
- CVSS 7.5 High
Routinator exits when parsing an incorrect or very large CRL file
- NLnet Labs Routinator
- CWE-755
- CVSS 8.2 High
Routinator incorrectly handles delta updates
- NLnet Labs Routinator
- CWE-755
- CVSS 6.5 Medium
Routinator exits when requesting the output repeatedly
- NLnet Labs Routinator
- CWE-755
- CVSS 8.7 High
Routinator exits when accepting an incoming HTTP or RTR connection fails
- NLnet Labs Routinator
- CWE-755
- CVSS 7.5 High
Routinator crashes when illegal characters are present in manifest file names
- NLnet Labs Routinator
- CWE-1286
- CVSS 7.5 High
Routinator terminates when RTR connection is reset too quickly after opening
- NLnet Labs Routinator
- CWE-253
- CVSS 7.5 High
Crashes on parsing certain invalid RPKI objects
- NLnet Labs Routinator
- CWE-232
- CWE-240
-
Hanging RRDP request
- NLnet Labs Routinator
- CWE-755
-
Invalid RPKI data could disable Route Origin Validation on RTR clients.
- NLnet Labs Routinator
- CWE-1288