Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hqhq-hp5x-xp3w

Опубликовано: 21 апр. 2025
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

GoBGP does not properly check the input length

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).

Пакеты

Наименование

github.com/osrg/gobgp

go
Затронутые версииВерсия исправления

Отсутствует

Наименование

github.com/osrg/gobgp/v3

go
Затронутые версииВерсия исправления

< 3.35.0

3.35.0

EPSS

Процентиль: 18%
0.00058
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVSS3: 4.3
ubuntu
2 месяца назад

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).

CVSS3: 4.3
nvd
2 месяца назад

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).

CVSS3: 4.3
debian
2 месяца назад

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go ...

EPSS

Процентиль: 18%
0.00058
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1284