CVE-2024-1622

概要

参考情報

• lists.fedoraproject.org/archives/list/[email protected]/message/4HPRUIPAI2BBDGFVLN733JLIUJWLEBLF · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/N2N3N3SNBHSH7GN3JOLR7YUF5FCTQQ5O · Mailing List
• nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt · Vendor Advisory

routinator のその他の脆弱性

• CVE-2026-49235高 7.5When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes.
• CVE-2026-49234高 7.5When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. Th…
• CVE-2026-49233高 7.5Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cac…
• CVE-2023-39916中 6.5NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible path traversal vuln…
• CVE-2023-39915高 7.5NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insu…