Buffer Overflow vulnerability in osrg gobgp

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-46565 · ADVISORY
• osrg/gobgp · WEB
• osrg/gobgp commit 419c50d · WEB
• osrg/gobgp · PACKAGE

Mais vulnerabilidades de github.com/osrg/gobgp/v3

• CVE-2026-30405ALTO 7.5An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute
• CVE-2025-43973CRÍTICO 9.8An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in wh…
• CVE-2025-43972ALTO 7.5An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer …
• CVE-2025-43971ALTO 7.5An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersion…
• CVE-2025-43970MÉDIO 5.3An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there…