Skip to content
OpenAdvisories
Unscored CVE-2021-41531 EUVD-2021-28550GHSA-mjc7-fwvm-67h4

Invalid RPKI data could disable Route Origin Validation on RTR clients.

Published Sep 21, 2021 · Updated Sep 16, 2024 · Assigned by NLnet Labs

Description

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.

Affected products

VendorProductAffectedFixed
NLnet Labs Routinator unspecified – ≤ 0.9.0 —

References