← Retour aux CVEs

CVE-2020-17366

HIGH

7.4

Description

An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view.

Details CVE

Score CVSS v3.17.4

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteHIGH

Privileges requisNONE

Interaction utilisateurNONE

Publie8/5/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

nlnetlabs:routinator

Faiblesses (CWE)

CWE-295

References

https://github.com/NLnetLabs/routinator/issues/319(cve@mitre.org)

https://github.com/NLnetLabs/routinator/releases/tag/v0.8.0(cve@mitre.org)

https://github.com/NLnetLabs/routinator/issues/319(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/NLnetLabs/routinator/releases/tag/v0.8.0(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.