Triggered crash on direct RRDP access

CVE-2023-0158

What is CVE-2023-0158?

NLnet Labs Krill features a built-in web server that directly exposes the RRDP repository content through the '/rrdp' endpoint. Prior to version 0.12.1, any direct query to an existing directory under '/rrdp/' led to the server crashing, instead of providing the expected RRDP file, such as '/rrdp/notification.xml'. If the '/rrdp' endpoint is publicly accessible, malicious actors can exploit this flaw, resulting in server downtime. Although the repository content remains intact, the consequent unavailability of the server poses serious operational issues, particularly if such attacks are orchestrated persistently without adequate countermeasures in place.

References