« Volver al listado

CVE-2021-43174

Estado: ModificadaAlta (7.5)—

NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Debian — Debian LinuxNlnetlabs — Routinator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-43174",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sep@nlnetlabs.nl",
      "affectedData": [
        {
          "vendor": "NLnet Labs",
          "product": "Routinator",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "0.10.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-11-09T17:15:07.783",
  "references": [
    {
      "url": "https://www.debian.org/security/2022/dsa-5041",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "sep@nlnetlabs.nl"
    },
    {
      "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sep@nlnetlabs.nl"
    },
    {
      "url": "https://www.debian.org/security/2022/dsa-5041",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sep@nlnetlabs.nl",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1325"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element."
    },
    {
      "lang": "es",
      "value": "NLnet Labs Routinator versiones 0.9.0 hasta la 0.10.1 incluyéndola, soportan una codificación de transferencia gzip cuando se consultan repositorios RRDP. Esta codificación puede ser usada por un repositorio RRDP para causar un bloqueo de memoria en estas versiones de Routinator. RRDP usa XML que permite cantidades arbitrarias de espacio en blanco en los datos codificados. El esquema gzip comprime muy bien estos espacios en blanco, conllevando a archivos comprimidos muy pequeños que se vuelven enormes cuando se descomprimen para su posterior procesamiento, lo suficientemente grandes como para que Routinator agote la memoria cuando analiza los datos de entrada esperando el siguiente elemento XML"
    }
  ],
  "lastModified": "2026-06-17T04:10:35.110",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nlnetlabs:routinator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECF24523-48B7-4EC6-90C7-8F1A1EB29AC4",
              "versionEndExcluding": "0.10.2",
              "versionStartIncluding": "0.9.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sep@nlnetlabs.nl"
}