FKIE_CVE-2025-0638

Vulnerability from fkie_nvd - Published: 2025-01-22 16:15 - Updated: 2025-01-22 16:15
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.
References
sep@nlnetlabs.nlhttps://www.nlnetlabs.nl/downloads/routinator/CVE-2025-0638.txt
Impacted products
Vendor Product Version
To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator."
    },
    {
      "lang": "es",
      "value": "El c\u00f3digo inicial que analiza el manifiesto no verifica el contenido de los nombres de los archivos, pero el c\u00f3digo posterior asumi\u00f3 que estaba verificado y entr\u00f3 en p\u00e1nico al encontrar caracteres ilegales, lo que provoc\u00f3 un bloqueo de Routinator."
    }
  ],
  "id": "CVE-2025-0638",
  "lastModified": "2025-01-22T16:15:29.977",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "sep@nlnetlabs.nl",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-01-22T16:15:29.977",
  "references": [
    {
      "source": "sep@nlnetlabs.nl",
      "url": "https://www.nlnetlabs.nl/downloads/routinator/CVE-2025-0638.txt"
    }
  ],
  "sourceIdentifier": "sep@nlnetlabs.nl",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1286"
        }
      ],
      "source": "sep@nlnetlabs.nl",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.