CVE-2022-3029CWE-241

Fatal error on incorrect base64 data in RRDP

published September 13, 2022

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error and causes Routinator to exit. Worst case impact of this vulnerability is denial of service for the RPKI data that Routinator provides to routers. This may stop your network from validating route origins based on RPKI data. This vulnerability does not allow an attacker to manipulate RPKI data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00849 · 57.7th percentile
Weakness
CWE-241 · Improper Handling of Unexpected Data Type
Published
2022-09-13T15:17Z
EPSS history
Timeline
  • 13 SEP 15:17Z
    Fatal error on incorrect base64 data in RRDP
    cvelistv5