Skip to content
OpenAdvisories

Package · Go

github.com/osrg/gobgp

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-7737

    osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds

    A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-boun…

    osrg gobgp gobgp gobgp Debian Ubuntu Go
  • Medium 6.8
    CVE-2025-43972

    GoBGP crashes in the flowspec parser

    An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.

    GoBGP GoBGP gobgp gobgp Debian Ubuntu Go
  • Medium 6.8
    CVE-2025-43973

    GoBGP does not verify that the input length

    An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message.

    GoBGP GoBGP gobgp gobgp Debian Ubuntu Go
  • Medium 4.3
    CVE-2025-43970

    GoBGP does not properly check the input length

    An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).

    GoBGP GoBGP gobgp gobgp Debian Ubuntu Go