Approved changes feed: RSS · Atom
cpe:2.3:a:gobgp:gobgp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gobgp (c47cf495-8a9b-529e-9aa2-be59a22c13ef) |
|---|---|
| Product | Gobgp (e556ab5b-6004-59e5-a4d1-de3659044751) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-43973 |
vulnerable | 2026-06-08 07:25:10.516877 |
Details available
MEDIUM (6.8)
An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message.
Published: 2025-04-21T00:00:00.000Z
Updated: 2025-04-21T01:52:59.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43972 |
vulnerable | 2026-06-08 07:25:10.516599 |
Details available
MEDIUM (6.8)
An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.
Published: 2025-04-21T00:00:00.000Z
Updated: 2025-04-21T01:54:34.786Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43971 |
vulnerable | 2026-06-08 07:25:10.516221 |
Details available
HIGH (8.6)
An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.
Published: 2025-04-21T00:00:00.000Z
Updated: 2025-04-21T01:55:21.073Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43970 |
vulnerable | 2026-06-08 07:25:10.514934 |
Details available
MEDIUM (4.3)
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
Published: 2025-04-21T00:00:00.000Z
Updated: 2025-04-21T01:56:11.101Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.