NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NNlnetlabs Routinator
APPNlnetlabs< 0.10.0
Related vulnerabilities
NLnet Labsβ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains ...
When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator c...
Routinator does not properly check the module component of rsync URIs, which are used to create the file syste...
When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endp...
Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the ...