// For flags

CVE-2021-43174

gzip transfer encoding caused out-of-memory crash

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element.

NLnet Labs Routinator versiones 0.9.0 hasta la 0.10.1 incluyéndola, soportan una codificación de transferencia gzip cuando se consultan repositorios RRDP. Esta codificación puede ser usada por un repositorio RRDP para causar un bloqueo de memoria en estas versiones de Routinator. RRDP usa XML que permite cantidades arbitrarias de espacio en blanco en los datos codificados. El esquema gzip comprime muy bien estos espacios en blanco, conllevando a archivos comprimidos muy pequeños que se vuelven enormes cuando se descomprimen para su posterior procesamiento, lo suficientemente grandes como para que Routinator agote la memoria cuando analiza los datos de entrada esperando el siguiente elemento XML

*Credits: We would like to thank Koen van Hove for the discovery.
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-11-01 CVE Reserved
  • 2021-11-09 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-787: Out-of-bounds Write
  • CWE-1325: Improperly Controlled Sequential Memory Allocation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Nlnetlabs
Search vendor "Nlnetlabs"
 Routinator
Search vendor "Nlnetlabs" for product "Routinator"
 >= 0.9.0 < 0.10.2
Search vendor "Nlnetlabs" for product "Routinator" and version " >= 0.9.0 < 0.10.2"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 11.0
Search vendor "Debian" for product "Debian Linux" and version "11.0"
-
Affected