CVE-2025-0638
Routinator crashes when illegal characters are present in manifest file names
- State
- Published
- Severity
- 7.5 High
- Published
- Jan 22, 2025
- Updated
- Feb 12, 2025
- Reserved
- Jan 22, 2025
Description
The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NLnet Labs |
Weaknesses
- CWE-1286 Improper Validation of Syntactic Correctness of Input
Affected Products
| Product | Versions |
|---|---|
RoutinatorNLnet Labs |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.