CVE-2021-41531

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation...

CVE-2021-41531 Invalid RPKI data could disable Route Origin Validation on RTR clients.

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation...

CVE-2021-41531

NLnet Labs Routinator (affected: versions prior to 0.10.0) contains a vulnerability where an invalid RTR payload is produced if a ROA’s max-length parameter value is too large for an RPKI CA. This causes RTR clients (e.g., routers) to reject the RPKI data set and effectively disables Route Origin...