| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/osrg/gobgp | all versions | |
| github.com/osrg/gobgp/v3 | < 3.35.0 | 3.35.0 |
| gobgp | < 3.35.0 | 3.35.0 |
An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free