181 matches found
NLnet Labs Routinator 路径遍历漏洞
NLnet Labs Routinator is an open-source RPKI routing origin validation service developed by NLnet Labs. NLnet Labs Routinator has a path traversal vulnerability, which stems from the improper checking of module components in the rsync URI. This vulnerability may allow for path traversal, enabling...
PT-2026-47303
Name of the Vulnerable Software and Affected Versions Routinator affected versions not specified Description Routinator crashes when a specifically crafted non-UTF-8 string is sent as the select-asn query parameter to the '/api/v1/origins' endpoint. This issue specifically impacts users who permi...
Routinator -- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-49233.txt reports: Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cache. This allows for path traversal by having a module name containing .., potential...
Routinator -- CWE-20 Improper Input Validation
https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-49234.txt reports: When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks. Thanks to X41 D-S...
PT-2026-47304
Name of the Vulnerable Software and Affected Versions Routinator affected versions not specified Description Routinator crashes when it encounters a file via RRDP Router Role Distribution Protocol that uses a specifically crafted Document Type Definition DTD, which is a set of markup declarations...
[SECURITY] Fedora 42 Update: rust-routinator-0.14.2-4.fc42
An RPKI relying party software...
[SECURITY] Fedora 43 Update: rust-routinator-0.14.2-4.fc43
An RPKI relying party software...
EUVD-2020-9320
Malware in sbrugna...
EUVD-2021-2309
Malware in sbrugna...
EUVD-2022-6868
Malicious code in bioql PyPI...
EUVD-2023-43613
Malicious code in bioql PyPI...
EUVD-2021-30119
Malicious code in bioql PyPI...
EUVD-2025-1802
Malicious code in bioql PyPI...
EUVD-2024-17362
Malicious code in bioql PyPI...
EUVD-2021-28550
Malicious code in bioql PyPI...
EUVD-2022-4484
Malicious code in bioql PyPI...
EUVD-2023-43614
Malicious code in bioql PyPI...
CVE-2020-17366
An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate...
Linux Distros Unpatched Vulnerability : CVE-2021-43173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to...
Linux Distros Unpatched Vulnerability : CVE-2021-43172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a ...