Описание
An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gobgp | fixed | 4.3.0-1 | package | |
| gobgp | no-dsa | trixie | package | |
| gobgp | no-dsa | bookworm | package | |
| gobgp | postponed | bullseye | package |
Примечания
https://github.com/osrg/gobgp/issues/3305
https://github.com/osrg/gobgp/commit/f12b8fbb84f9e1a58dca932ccf0b005039f3cfb5 (v4.3.0)
https://github.com/osrg/gobgp/commit/583080a7258e22cc884162e15b078771aa2c2c80
Связанные уязвимости
CVSS3: 7.5
ubuntu
5 месяцев назад
An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute
CVSS3: 7.5
nvd
5 месяцев назад
An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute
CVSS3: 7.5
github
5 месяцев назад
GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute