Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-39915

Crashes on parsing certain invalid RPKI objects

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NLnet Labs

Description

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NLnet Labs Routinator

Default version status: unaffected

  • * to < 0.12.2affected
  • 0.12.2 to < *unaffected

References