CVE-2026-72754: falha de alta gravidade em NLnet Labs Routinator
Routinator exits when parsing an incorrect or very large CRL file
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.4%
When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL file with the wrong encoding, it may exit.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
NLnet Labs · RoutinatorCVEs relacionadas — NLnet Labs Routinator
No mesmo produto, das mais perigosas para as menos.
CVE-2021-43173—Hanging RRDP requestEPSS 1.4%CVE-2021-43174—gzip transfer encoding caused out-of-memory crashEPSS 1.1%CVE-2021-43172—Infinite length chain of RRDP repositoriesEPSS 1.1%CVE-2024-1622HIGHRoutinator terminates when RTR connection is reset too quickly after openingEPSS 1.0%CVE-2021-41531—Invalid RPKI data could disable Route Origin Validation on RTR clients.EPSS 0.9%CVE-2022-3029—Fatal error on incorrect base64 data in RRDPEPSS 0.8%