Routinator
Approved changes feed: RSS · Atom
cpe:2.3:a:nlnet_labs:routinator:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nlnet Labs (0c10f96c-93c5-5f8a-9565-16ce18fb699e) |
|---|---|
| Product | Routinator (8bfc903e-192f-5068-b9b4-68e1afdf58e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-72752 |
not_vulnerable | 2026-11-03 10:16:26.721160 |
Routinator exits when requesting the output repeatedly
MEDIUM (6.5)
Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. Additionally Routinator runs into a stack overflow and exits when a payload item with too much metadata is discarded at once.
This only affects users that make their HTTP or RTR server available to untrusted networks.
Published: 2026-10-26T17:06:15.152Z
Updated: 2026-10-26T17:57:34.344Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-72756 |
not_vulnerable | 2026-11-03 10:16:26.643768 |
Routinator exits on malformed rsync URIs
HIGH (7.5)
Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names, and folder names that overlap with existing file names.
Published: 2026-10-26T17:06:53.173Z
Updated: 2026-10-26T17:57:33.645Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-72753 |
not_vulnerable | 2026-11-03 10:16:26.589419 |
Routinator incorrectly handles delta updates
HIGH (8.2)
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory.
Published: 2026-10-26T17:06:25.709Z
Updated: 2026-10-26T17:57:34.197Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-72757 |
not_vulnerable | 2026-11-03 10:16:26.465977 |
Routinator HTTP server becomes unavailable with many unclosed connections
MEDIUM (5.3)
Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server.
This only affects users that make their HTTP or RTR server available to untrusted networks.
Published: 2026-10-26T17:07:02.239Z
Updated: 2026-10-26T17:57:33.452Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-72755 |
not_vulnerable | 2026-11-03 10:16:26.137695 |
Routinator stores TA certificate in cache without validation
LOW (3.8)
Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.
Published: 2026-10-26T17:06:43.423Z
Updated: 2026-10-26T17:57:33.844Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-72758 |
not_vulnerable | 2026-11-03 10:16:24.035719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-72754 |
not_vulnerable | 2026-11-03 10:16:23.885270 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49235 |
not_vulnerable | 2026-07-29 00:57:45.293884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49234 |
not_vulnerable | 2026-07-29 00:57:45.293631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49233 |
not_vulnerable | 2026-07-29 00:57:45.293501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49232 |
not_vulnerable | 2026-07-29 00:57:45.293306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0638 |
not_vulnerable | 2026-06-08 07:02:25.003667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1622 |
not_vulnerable | 2026-06-08 06:27:13.777329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39916 |
vulnerable | 2026-06-08 06:09:38.092836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39915 |
vulnerable | 2026-06-08 06:09:38.091604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3029 |
vulnerable | 2026-06-08 05:47:19.071906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43174 |
vulnerable | 2026-06-08 05:36:42.371879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43173 |
vulnerable | 2026-06-08 05:36:42.371376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43172 |
vulnerable | 2026-06-08 05:36:42.370026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41531 |
vulnerable | 2026-06-08 05:35:20.634947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.