2 lines
1.9 KiB
JSON
2 lines
1.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"Routinator","vendor":"NLnet Labs","versions":[{"lessThan":"*","status":"unaffected","version":"0.14.1","versionType":"semver"}]}],"source":"sep@nlnetlabs.nl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator."},{"lang":"es","value":"El código inicial que analiza el manifiesto no verifica el contenido de los nombres de los archivos, pero el código posterior asumió que estaba verificado y entró en pánico al encontrar caracteres ilegales, lo que provocó un bloqueo de Routinator."}],"id":"CVE-2025-0638","lastModified":"2026-06-17T08:26:53.137","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"sep@nlnetlabs.nl","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0638","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-01-22T16:15:35.504737Z","version":"2.0.3"}}]},"published":"2025-01-22T16:15:29.977","references":[{"source":"sep@nlnetlabs.nl","url":"https://www.nlnetlabs.nl/downloads/routinator/CVE-2025-0638.txt"}],"sourceIdentifier":"sep@nlnetlabs.nl","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-1286"}],"source":"sep@nlnetlabs.nl","type":"Secondary"}]}
|