Photon OS 5.0: Gobgp PHSA-2025-5.0-0548

An update of the gobgp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0548. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2025-5.0-0548

Updates of 'gobgp' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0548

Updates of 'gobgp' packages of Photon OS have been released...

Photon OS 4.0: Gobgp PHSA-2025-4.0-0807

An update of the gobgp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0807. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Gobgp PHSA-2025-4.0-0821

An update of the gobgp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0821. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

[SECURITY] [DLA 4223-1] debian-security-support update

Debian LTS Advisory DLA-4223-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón June 21, 2025 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2025.06.21 Debian Bug : 1100929 1106203 debian-security-support, the Debian security...

Denial Of Service (DoS)

github.com/osrg/gobgp is vulnerable to a Denial of Service DoS. The vulnerability is due to insufficient input validation in the pkg/packet/bgp/bgp.go flowspec parser, where the parser fails to handle inputs smaller than 20 bytes, allowing an attacker to send specially crafted data that causes a...

Denial Of Service (DoS)

github.com/osrg/gobgp is vulnerable to Denial Of Service DoS The vulnerability is due to missing validation of the softwareVersionLen field, allowing an attacker to send a crafted BGP packet with a zero softwareVersionLen value to crash the GoBGP process and cause a denial of service...

Improper Input Validation

github.com/osrg/gobgp is vulnerable to improper input validation. The vulnerability is due to insufficient boundary checking when parsing RTR messages, which allows an attacker to send a malformed RTR message that could result in a buffer over-read or denial of service DoS, potentially causing th...

Denial Of Service (DoS)

github.com/osrg/gobgp is vulnerable to Denial Of Service DoS. The vulnerability is due to improper input length validation in the GoBGP code. Specifically, in pkg/packet/mrt/mrt.go, the code does not properly check the expected byte lengths 12 or 36 bytes based on the address family, allowing...

CVE-2025-43973

An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...

CVE-2025-43972

An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context...

CVE-2025-43970

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes depending on the address family...

CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

SUSE CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

GO-2025-3631 GoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp

GoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp...

GO-2025-3630 GoBGP does not properly check the input length in github.com/osrg/gobgp

GoBGP does not properly check the input length in github.com/osrg/gobgp...

GO-2025-3632 GoBGP crashes in the flowspec parser in github.com/osrg/gobgp

GoBGP crashes in the flowspec parser in github.com/osrg/gobgp...

GO-2025-3633 GoBGP does not verify that the input length in github.com/osrg/gobgp

GoBGP does not verify that the input length in github.com/osrg/gobgp...

GoBGP does not verify that the input length

An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...