CVE-2020-17366

2020-08-0522:15:12

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation “.roa” files or X509 Certificate Revocation List files from the RPKI relying party’s view.

CPENameOperatorVersion
routinatoreq0.3.3
routinatoreq0.1.2
routinatoreq0.3.2
routinatoreq0.7.1-rc1
routinatoreq0.5.0
routinatoreq0.3.0
routinatoreq0.7.1-rc2
routinatoreq0.6.4
routinatoreq0.7.0-rc1
routinatoreq0.7.0-rc2

Name	Operator	Version
routinator	eq	0.3.3
routinator	eq	0.1.2
routinator	eq	0.3.2
routinator	eq	0.7.1-rc1
routinator	eq	0.5.0
routinator	eq	0.3.0
routinator	eq	0.7.1-rc2
routinator	eq	0.6.4
routinator	eq	0.7.0-rc1
routinator	eq	0.7.0-rc2