NLnet Labs Routinator improperly handles exceptional conditions (CWE-755) by exiting upon any error during incoming HTTP or RTR connections, including recoverable errors such as resource exhaustion (e.g., running out of file descriptors). This behavior can be maliciously triggered by an attacker opening a large number of connections, causing the Routinator service to terminate unexpectedly. The vulnerability impacts only deployments exposing the HTTP or RTR server to untrusted networks. No vendor advisory or patch information is currently available.

Successful exploitation results in denial of service by causing Routinator to exit unexpectedly when overwhelmed with connection attempts. This disrupts the availability of Routinator's HTTP or RTR services. There is no indication of privilege escalation, data disclosure, or code execution. The impact is limited to service availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid exposing the HTTP or RTR server to untrusted networks or implement network-level protections such as rate limiting or connection filtering to reduce the risk of triggering this condition.