Lucene search

K
cvelistNLnet LabsCVELIST:CVE-2021-41531
HistorySep 21, 2021 - 12:00 a.m.

CVE-2021-41531 Invalid RPKI data could disable Route Origin Validation on RTR clients.

2021-09-2100:00:00
CWE-1288
NLnet Labs
www.cve.org
1

0.001 Low

EPSS

Percentile

35.9%

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.

CNA Affected

[
  {
    "product": "Routinator",
    "vendor": "NLnet Labs",
    "versions": [
      {
        "lessThanOrEqual": "0.9.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

0.001 Low

EPSS

Percentile

35.9%

Related for CVELIST:CVE-2021-41531