漏洞标题
gzip传输编码导致内存崩溃
漏洞描述信息
gzip传输编码导致内存溢出崩溃
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
gzip transfer encoding caused out-of-memory crash
漏洞描述信息
NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
NLnet Labs Routinator 缓冲区错误漏洞
漏洞描述信息
NLnet Labs Routinator是荷兰Stichting NLnet（Stichting Nlnet）实验室的一款使用Rust语言编写的RPKI（资源公钥基础设施）验证器。 NLnet Labs Routinator存在安全漏洞，该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。
CVSS信息
N/A
漏洞类别
缓冲区错误