FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

routinator -- multiple vulnerabilities

Affected packages
		routinator	<	0.10.1

Details

VuXML ID	9c990e67-6e30-11ec-82db-b42e991fc52e
Discovery	2021-11-09
Entry	2022-01-05

nlnetlabs reports:

Release 0.10.2 contains fixes for the following issues:

Medium CVE-2021-43172: Infinite length chain of RRDP repositories. Credit: Koen van Hove. Date: 2021-11-09

Medium CVE-2021-43173: Hanging RRDP request. Credit: Koen van Hove. Date: 2021-11-09

Medium CVE-2021-43174: gzip transfer encoding caused out-of-memory crash. Credit Koen van Hove. Date: 2021-11-09

[source]

References

CVE Name	CVE-2021-43172
CVE Name	CVE-2021-43173
CVE Name	CVE-2021-43174
URL	https://nlnetlabs.nl/projects/rpki/security-advisories/