CVE-2021-41531CWE-1288

Invalid RPKI data could disable Route Origin Validation on RTR clients.

published September 21, 2021

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00930 · 60.2th percentile
Weakness
CWE-1288 · Improper Validation of Consistency within Input
Published
2021-09-21T13:23Z
EPSS history
Timeline
  • 21 SEP 13:23Z
    Invalid RPKI data could disable Route Origin Validation on RTR clients.
    cvelistv5