GHSA-wmvj-f67g-qg4g
GoBGP has an out-of-bounds read in the ParseIP6Extended function
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/osrg/gobgp/v4 | < 4.4.0 | 4.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
References
External links from the advisory. They lead to third-party sites.