CVE-2021-41531

🗓️ 21 Sep 2021 13:23:17Reported by NLnet LabsType

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2021-41531	21 Sep 202118:29	–	circl
CNNVD	NLnet Labs Routinator 输入验证错误漏洞	21 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-41531 Invalid RPKI data could disable Route Origin Validation on RTR clients.	21 Sep 202113:23	–	cvelist
EUVD	EUVD-2021-28550	3 Oct 202520:07	–	euvd
NVD	CVE-2021-41531	21 Sep 202114:15	–	nvd
OSV	CVE-2021-41531	21 Sep 202114:15	–	osv
Prion	Input validation	21 Sep 202114:15	–	prion

NVD

Node

nlnetlabs routinatorRange<0.10.0

[
  {
    "product": "Routinator",
    "vendor": "NLnet Labs",
    "versions": [
      {
        "lessThanOrEqual": "0.9.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
nlnetlabs	www.nlnetlabs.nl/downloads/routinator/CVE-2021-41531.txt

21 Nov 2024 06:26Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.00351