Skip to contentNlnet Labs Routinator vulnerabilities
- nlnet labs routinatorRoutinator may exit on malformed rangesCVE-2026-727587.5 High
- nlnet labs routinatorRoutinator HTTP server becomes unavailable with many unclosed connectionsCVE-2026-727575.3 Medium
- nlnet labs routinatorRoutinator exits on malformed rsync URIsCVE-2026-727567.5 High
- nlnet labs routinatorRoutinator stores TA certificate in cache without validationCVE-2026-727553.8 Low
- nlnet labs routinatorRoutinator exits when parsing an incorrect or very large CRL fileCVE-2026-727547.5 High
- nlnet labs routinatorRoutinator incorrectly handles delta updatesCVE-2026-727538.2 High
- nlnet labs routinatorRoutinator exits when requesting the output repeatedlyCVE-2026-727526.5 Medium
- nlnet labs routinatorRoutinator crashes on specifically crafted RRDP XML filesCVE-2026-49235Fix available8.7 High
- nlnet labs routinatorRoutinator crashes on specifically crafted ASN strings in the APICVE-2026-49234Fix available8.2 High
- nlnet labs routinatorRoutinator cache path traversal using rogue rsync URIsCVE-2026-49233Fix available8.3 High
- nlnet labs routinatorRoutinator exits when accepting an incoming HTTP or RTR connection failsCVE-2026-492328.7 High
- nlnet labs routinatorRoutinator crashes when illegal characters are present in manifest file namesCVE-2025-06387.5 High
- nlnet labs routinator, fedoraproject fedora +1 moreRoutinator terminates when RTR connection is reset too quickly after openingCVE-2024-16227.5 High
- nlnet labs routinatorPossible path traversal when storing RRDP responsesCVE-2023-39916Fix available9.3 Critical
- nlnet labs routinatorCrashes on parsing certain invalid RPKI objectsCVE-2023-399157.5 High
- nlnet labs routinatorFatal error on incorrect base64 data in RRDPCVE-2022-3029Fix available7.5 High
- nlnet labs routinator, debian linux +1 moregzip transfer encoding caused out-of-memory crashCVE-2021-43174Fix available7.5 High
- nlnet labs routinator, debian linux +1 moreHanging RRDP requestCVE-2021-43173Fix available7.5 High
- nlnet labs routinatorInfinite length chain of RRDP repositoriesCVE-2021-43172Fix available7.5 High
- nlnet labs routinatorInvalid RPKI data could disable Route Origin Validation on RTR clients.CVE-2021-415317.5 High