CVE-2022-3029 Fatal error on incorrect base64 data in RRDP

In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error and causes Routinator to exit. Worst case impact of this vulnerability is denial of service for the...

CVE-2022-3029

NLnet Labs Routinator 0.9.0–0.11.2 is affected by a base64 encoding error in RRDP snapshot/delta processing that is treated as a fatal error, causing an eventual denial of service of the RPKI data provided to routers. The issue does not enable data manipulation. From Routinator 0.11.3 onwards, en...