Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d20ff4a09b advisory.

    from [changelog](https://github.com/NLnetLabs/routinator/commit/f1e85a7505201524bd68fb9296e7db0752907a6f):

    * Fix the RTR listener so that Routinator wont exit if an incoming RTR       connection is closed again too quickly. ([#937], reported by Yohei       Nishimura, Atsushi Enomoto, Ruka Miyachi; Internet Multifeed Co., Japan.
      Assigned [CVE-2024-1622].)

    [#937]: https://github.com/NLnetLabs/routinator/pull/937     [CVE-2024-1622]: https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-28a151028a advisory.

    from [changelog](https://github.com/NLnetLabs/routinator/commit/f1e85a7505201524bd68fb9296e7db0752907a6f):

    * Fix the RTR listener so that Routinator wont exit if an incoming RTR       connection is closed again too quickly. ([#937], reported by Yohei       Nishimura, Atsushi Enomoto, Ruka Miyachi; Internet Multifeed Co., Japan.
      Assigned [CVE-2024-1622].)

    [#937]: https://github.com/NLnetLabs/routinator/pull/937     [CVE-2024-1622]: https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1f5908a311 advisory.

    from [changelog](https://github.com/NLnetLabs/routinator/commit/f1e85a7505201524bd68fb9296e7db0752907a6f):

    * Fix the RTR listener so that Routinator wont exit if an incoming RTR       connection is closed again too quickly. ([#937], reported by Yohei       Nishimura, Atsushi Enomoto, Ruka Miyachi; Internet Multifeed Co., Japan.
      Assigned [CVE-2024-1622].)

    [#937]: https://github.com/NLnetLabs/routinator/pull/937     [CVE-2024-1622]: https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
194624	Fedora 40 : rust-routinator (2024-d20ff4a09b)	Nessus	Fedora Local Security Checks	high
192128	Fedora 38 : rust-routinator (2024-28a151028a)	Nessus	Fedora Local Security Checks	high
192125	Fedora 39 : rust-routinator (2024-1f5908a311)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2024-1622

high

Tenable Plugins

high

high

high