Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: NLnet Labs Routinator 0.12.2 Clear all filters
TI-2023-20815 CVE-2023-39916 · GHSA-5rxf-fqch-7vqp

Possible path traversal when storing RRDP responses

Priority MEDIUM 41

NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible path traversal vulnerability in the optional, off-by-default keep-rrdp-responses feature that allow…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00643 Published 2023-09-13 Fixed in 0.12.2 CWE-35
TI-2023-20814 CVE-2023-39915 · GHSA-xhpp-8gq6-3hf5

Crashes on parsing certain invalid RPKI objects

Priority MEDIUM 40

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00624 Published 2023-09-13 Fixed in 0.12.2 CWE-232