Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Routinator crashes when illegal characters are present in manifest file names
Vulnerability Description
The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
CWE-1286
Vulnerability Title
NLnet Routinator 安全漏洞
Vulnerability Description
NLnet Routinator是NLnet团队的一款使用Rust语言编写的RPKI(资源公钥基础设施)验证器。 NLnet Routinator 0.14.0及之前版本存在安全漏洞,该漏洞源于初始解析清单的代码并未检查文件名的内容,但后来的代码假定已经检查过,并在遇到非法字符时发生崩溃,导致Routinator崩溃。
CVSS Information
N/A
Vulnerability Type
N/A