CVE-2023-39915

Опубликовано: 13 сент. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.

Ссылки

https://nlnetlabs.nl/downloads/routinator/CVE-2023-39915.txt
Vendor Advisory
https://nlnetlabs.nl/downloads/routinator/CVE-2023-39915.txt
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nlnetlabs:routinator:*:*:*:*:*:*:*:*

Версия до 0.12.2 (исключая)

EPSS

Процентиль: 57%

0.00346

Низкий

7.5 High

CVSS3

Дефекты

CWE-232

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-39915

CVSS3: 7.5

debian

больше 2 лет назад

NLnet Labs' Routinator up to and including version 0.12.1 may crash wh ...

GHSA-xhpp-8gq6-3hf5

CVSS3: 7.5

github

больше 2 лет назад

NLnet Labs’ Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.

EPSS

Процентиль: 57%

0.00346

Низкий

7.5 High

CVSS3

Дефекты

CWE-232

NVD-CWE-noinfo