EUVD-2025-12349

Malicious code in bioql PyPI...

The vulnerability of the `pkg/packet/bgp/bgp.go` component, which is part of the BGP Border Gateway Protocol implementation by GoBGP, allows a attacker to cause a service failure.

The vulnerability of the pkg/packet/bgp/bgp.go component, which is part of the BGP Border Gateway Protocol implementation by GoBGP, is related to an error in calculating the value of softwareVersionLen. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20250808-07

The vulnerability in the GoBGP border gateway protocol is related to the lack of input data length conformance checking. where all bytes are available for an RTR message. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service A vulnerability in the...

SUSE CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

GHSA-7M35-VW2C-696V GoBGP panics due to a zero value for softwareVersionLen

An issue was discovered in GoBGP before 3.35.0 introduced in v3.11.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error in the DecodeFromBytes function in bgp.go. The softwareVersionLen parameter is not checked for the case where it is set to 0. As a result, an attacker can trigger a panic by sending a malicious packet with a zero value...

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error in the DecodeFromBytes function in bgp.go. The softwareVersionLen parameter is not checked for the case where it is set to 0. As a result, an attacker can trigger a panic by sending a malicious packet with a zero value...

UBUNTU-CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

GoBGP 安全漏洞

GoBGP is an open source Border Gateway Protocol BGP implementation from osrg open source. A security vulnerability exists in GoBGP versions prior to 3.35.0, which stems from pkg/packet/bgp/bgp.go allows attackers to cause a crash via a zero value softwareVersionLen...

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

...

The vulnerability of the bgpd/bgp_open.c file in the software for implementing routing on Unix-like systems allows a hacker to cause a service failure by copying buffers without checking the input size.

The vulnerability of the bgpd/bgpopen.c file of the networking routing implementation software on Unix-like systems is related to the lack of checks for the length of the software’s rcv version. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SUSE CVE-2023-41361

An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...

Design/Logic Flaw

An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...

FRRouting FRR 安全漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 9.0 and earlier versions, which stems from the fact that the length of the rcv software version is not checked for excessive length...