CVE-2022-3029

Fatal error on incorrect base64 data in RRDP

State: Published
Severity: Not scored
Published: Sep 13, 2022
Updated: Sep 16, 2024
Reserved: Aug 29, 2022

Description

In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error and causes Routinator to exit. Worst case impact of this vulnerability is denial of service for the RPKI data that Routinator provides to routers. This may stop your network from validating route origins based on RPKI data. This vulnerability does not allow an attacker to manipulate RPKI data.

Scores

The record has no CVSS score.

Weaknesses

CWE-241 Improper Handling of Unexpected Data Type

Affected Products

Product	Versions
RoutinatorNLnet Labs	0.11.2 and earlierAffected

References

https://www.nlnetlabs.nl/downloads/routinator/CVE-2022-3029.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.