title: Invalid RPKI data could disable Route Origin Validation on RTR clients.
description: NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA. This will lead to RTR clients such as routers to reject the RPKI data set, effectively disabling Route Origin Validation.
problem types: CWE-1288: Improper Validation of Consistency within Input
affected:
{
product: Routinator
vendor: NLnet Labs
versions:
lessThanOrEqual: 0.9.0, status: affected, version: unspecified, versionType: custom
}