« Volver al listado

CVE-2021-41531

Estado: ModificadaAlta (7.5)—

NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nlnetlabs — Routinator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-41531",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sep@nlnetlabs.nl",
      "affectedData": [
        {
          "vendor": "NLnet Labs",
          "product": "Routinator",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "0.9.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-09-21T14:15:07.663",
  "references": [
    {
      "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-41531.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sep@nlnetlabs.nl"
    },
    {
      "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-41531.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sep@nlnetlabs.nl",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1288"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation."
    },
    {
      "lang": "es",
      "value": "NLnet Labs Routinator versiones anteriores a 0.10.0, produce una carga útil RTR no válida si una CA RPKI usa valores demasiado grandes en el parámetro de longitud máxima en un ROA. Esto conlleva a que los clientes RTR, como los enrutadores, rechacen el conjunto de datos RPKI, deshabilitando efectivamente la Comprobación del Origen de Ruta"
    }
  ],
  "lastModified": "2026-06-17T04:08:35.960",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nlnetlabs:routinator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB8BED71-E3B6-4F42-8A5E-07DCFE189686",
              "versionEndExcluding": "0.10.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sep@nlnetlabs.nl"
}