1. Home
  2. CVE Database
  3. CVE-2023-39915
HIGH · 7.5

CVE-2023-39915

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-...

Vulnerability Description

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
NlnetlabsRoutinator< 0.12.2

Related Weaknesses (CWE)

CWE-232CWE-240

References

FAQ

What is CVE-2023-39915?

CVE-2023-39915 is a vulnerability with a CVSS score of 7.5 (HIGH). NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-...

How severe is CVE-2023-39915?

CVE-2023-39915 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-39915?

Check the references section above for vendor advisories and patch information. Affected products include: Nlnetlabs Routinator.