PT-2023-27150 · Bcder+1 · Bcder+1

Donika Mirdita + 2 · Publicado 2023-09-13 · Atualizado 2024-09-11 · CVE-2023-39915

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Routinator versions up to and including 0.12.1

Description The issue is caused by insufficient input checking in the bcder library, which may lead to a crash when trying to parse certain malformed RPKI objects.

Recommendations For versions up to and including 0.12.1, update to a version that includes the fix for the insufficient input checking in the bcder library to prevent crashes when parsing malformed RPKI objects. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-240

CWE-232

Identificadores relacionados

CVE-2023-39915

Produtos afetados

Routinator

Bcder

Referências · 6

• https://t.me/cibsecurity/70392 · Publicação no Telegram
• https://nlnetlabs.nl/downloads/routinator/CVE-2023-39915.txt · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1701969248615018975 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-39915 · Nota de Segurança
• https://twitter.com/cracbot/status/1702200560588615696 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-39915 · Aviso do Fabricante