CVE-2023-39915 — Crashes on parsing certain invalid RPKI objects

CVE-2023-39915

Crashes on parsing certain invalid RPKI objects PUBLISHED

Description (CNA)

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.

Affected (CNA)

Vendor / product	Versions
NLnet Labs / Routinator	affected * before 0.12.2; unaffected 0.12.2 before *

CWE

CWE-232, CWE-240

References

https://nlnetlabs.nl/downloads/routinator/CVE-2023-39915.txt

ADP enrichment

CVE

No English description supplied.

https://nlnetlabs.nl/downloads/routinator/CVE-2023-39915.txt

CISA-ADP

No English description supplied.

No references supplied.