← Back to CVEs

CVE-2020-17366

HIGH

7.4

Description

An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view.

CVE Details

CVSS v3.1 Score7.4

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Attack VectorNETWORK

ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

Published8/5/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

nlnetlabs:routinator

Weaknesses (CWE)

CWE-295

References

https://github.com/NLnetLabs/routinator/issues/319(cve@mitre.org)

https://github.com/NLnetLabs/routinator/releases/tag/v0.8.0(cve@mitre.org)

https://github.com/NLnetLabs/routinator/issues/319(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/NLnetLabs/routinator/releases/tag/v0.8.0(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.