Routinator - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/routinator/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 19:45:24 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNLnet Labs Routinator: RRDP delta processing denial-of-service (CVE-2026-72753)https://feed.craftedsignal.io/briefs/2026-10-routinator-rrdp-dos/Mon, 26 Oct 2026 19:45:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-routinator-rrdp-dos/Routinator is vulnerable to a denial-of-service condition where specifically crafted or malformed RRDP notification files cause memory exhaustion during delta entry processing.CVE-2026-72753 describes a vulnerability in Routinator's RRDP notification file handling. When the software encounters an RRDP notification file containing gaps in delta entries, it improperly accepts and parses the file, resulting in potential data inconsistency. Furthermore, processing an excessive number of delta entries within a single file can lead to memory exhaustion, resulting in a denial-of-service condition.

Impact

Successful exploitation allows for a denial-of-service condition via resource exhaustion (memory). Additionally, improper validation of delta gaps can result in the RPKI cache failing to synchronize correctly, leading to missing validation data.

Recommendation

  • Monitor the Routinator project release notes for an official patch addressing CVE-2026-72753.
  • Inventory systems running Routinator and prepare for an upgrade cycle once the remediating version is released.
  • Limit exposure of the Routinator RRDP synchronization process to trusted RPKI repositories where possible to mitigate the risk of processing malicious or malformed notification files.
]]>mediumadvisory