Skip to content
OpenAdvisories

Package · Debian

gobgp

21 known vulnerabilities.

4 results · Clear filters · Feed

  • Low 3.7

    osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access control

    A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP Header Handler. The manipulation leads to improper access controls. Remote exploita…

  • Low 3.7

    osrg GoBGP bgp.go DecodeFromBytes off-by-one

    A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data[1] can lead to off-by-one. The attack may be launched remotely. Attacks of thi…

  • Low 3.7

    osrg GoBGP BGP OPEN Message bgp.go DecodeFromBytes access control

    A security flaw has been discovered in osrg GoBGP up to 4.3.0. This affects the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP OPEN Message Handler. Performing a manipulation of the argument domainNameLen results in improper a…

  • Low 3.7

    osrg GoBGP rtr.go SplitRTR out-of-bounds

    A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The complexit…