CVE Vulnerabilities

CVE-2023-39915

Published: Sep 13, 2023 | Modified: Sep 15, 2023

CVSS 3.x

7.5

HIGH

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-39915
CWE	https://cwe.mitre.org/data/definitions/.html

NLnet Labs’ Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.

Affected Software

Name	Vendor	Start Version	End Version
Routinator	Nlnetlabs	*	0.12.2 (excluding)

References

https://nlnetlabs.nl/downloads/routinator/CVE-2023-39915.txt

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.