← CVE Intelligence

CVE-2021-41531

Invalid RPKI data could disable Route Origin Validation on RTR clients. PUBLISHED

Description (CNA)

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.

Affected (CNA)

Vendor / productVersions
NLnet Labs / Routinatoraffected unspecified through 0.9.0

CWE

CWE-1288

References

ADP enrichment

CVE

No English description supplied.