GoBGP does not properly check the input length

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-43970 · ADVISORY
• osrg/gobgp commit 5153baf · WEB
• osrg/gobgp · PACKAGE
• osrg/gobgp · WEB
• GitHub Advisory GHSA-hqhq-hp5x-xp3w · ADVISORY

github.com/osrg/gobgp のその他の脆弱性

• CVE-2026-7737高 7.5A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisti…
• CVE-2026-30405高 7.5An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute
• CVE-2025-43973緊急 9.8An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in wh…
• CVE-2025-43972高 7.5An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer …
• CVE-2025-43971高 7.5An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersion…