{"containers": {"cna": {"affected": [{"product": "Routinator", "vendor": "NLnet Labs", "versions": [{"lessThanOrEqual": "0.10.1", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "We would like to thank Koen van Hove for the discovery."}], "datePublic": "2021-11-09T00:00:00", "descriptions": [{"lang": "en", "value": "NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1325", "description": "CWE-1325: Improperly Controlled Sequential Memory Allocation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-01-12T10:06:12", "orgId": "206fc3a0-e175-490b-9eaa-a5738056c9f6", "shortName": "NLnet Labs"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt"}, {"name": "DSA-5041", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "https://www.debian.org/security/2022/dsa-5041"}], "title": "gzip transfer encoding caused out-of-memory crash", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "DATE_PUBLIC": "2021-11-09T14:00:00.000Z", "ID": "CVE-2021-43174", "STATE": "PUBLIC", "TITLE": "gzip transfer encoding caused out-of-memory crash"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Routinator", "version": {"version_data": [{"version_affected": "<=", "version_number": "0.9.0", "version_value": "0.10.1"}]}}]}, "vendor_name": "NLnet Labs"}]}}, "credit": [{"lang": "eng", "value": "We would like to thank Koen van Hove for the discovery."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-1325: Improperly Controlled Sequential Memory Allocation"}]}]}, "references": {"reference_data": [{"name": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt", "refsource": "MISC", "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt"}, {"name": "DSA-5041", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2022/dsa-5041"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T03:47:13.587Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt"}, {"name": "DSA-5041", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "https://www.debian.org/security/2022/dsa-5041"}]}]}, "cveMetadata": {"assignerOrgId": "206fc3a0-e175-490b-9eaa-a5738056c9f6", "assignerShortName": "NLnet Labs", "cveId": "CVE-2021-43174", "datePublished": "2021-11-09T16:41:41.211028Z", "dateReserved": "2021-11-01T00:00:00", "dateUpdated": "2024-09-16T21:08:21.566Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nlnetlabs:routinator:*:*:*:*:*:*:*:*", "matchCriteriaId": "ECF24523-48B7-4EC6-90C7-8F1A1EB29AC4", "versionEndExcluding": "0.10.2", "versionStartIncluding": "0.9.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element."}, {"lang": "es", "value": "NLnet Labs Routinator versiones 0.9.0 hasta la 0.10.1 incluy\u00e9ndola, soportan una codificaci\u00f3n de transferencia gzip cuando se consultan repositorios RRDP. Esta codificaci\u00f3n puede ser usada por un repositorio RRDP para causar un bloqueo de memoria en estas versiones de Routinator. RRDP usa XML que permite cantidades arbitrarias de espacio en blanco en los datos codificados. El esquema gzip comprime muy bien estos espacios en blanco, conllevando a archivos comprimidos muy peque\u00f1os que se vuelven enormes cuando se descomprimen para su posterior procesamiento, lo suficientemente grandes como para que Routinator agote la memoria cuando analiza los datos de entrada esperando el siguiente elemento XML"}], "id": "CVE-2021-43174", "lastModified": "2024-11-21T06:28:46.260", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2021-11-09T17:15:07.783", "references": [{"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2022/dsa-5041"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2022/dsa-5041"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1325"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "[email protected]", "type": "Primary"}]}

{}