Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-41531

Invalid RPKI data could disable Route Origin Validation on RTR clients.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NLnet Labs

Description

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NLnet Labs Routinator

  • unspecified to ≤ 0.9.0affected

References