What’s Vulnerable › Vulnerabilities
CVE-2024-1622: Routinator terminates when RTR connection is reset too quickly after opening
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-02-26 · updated 2026-06-17
- Weakness: CWE-253
Description
Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening.
Affected products
- Fedoraproject Fedora: 38, 39, 40
- NLnet Labs Routinator: before 0.13.2 — fixed in 0.13.2
How to fix
Upgrade to a fixed version: NLnet Labs Routinator 0.13.2. Check the vendor advisory for mitigations.
References
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HPRUIPAI2BBDGFVLN733JLIUJWLEBLF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N2N3N3SNBHSH7GN3JOLR7YUF5FCTQQ5O/
- https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HPRUIPAI2BBDGFVLN733JLIUJWLEBLF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N2N3N3SNBHSH7GN3JOLR7YUF5FCTQQ5O/
- https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt
Get alerted when CVE-2024-1622 or the next vulnerability affects your stack