GitHub Advisoryadvisory · Go

GHSA-6rqv-5cg7-m4x3 Buffer Overflow vulnerability in osrg gobgp

HIGH Published 2024-04-29 Modified 2024-09-06 Official page ↗
Aliases
CVE-2023-46565
Ecosystem
Go
Packages
github.com/osrg/gobgp/v3
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-120
Reviewed
2024-09-06

Affected packages

• Go github.com/osrg/gobgp/v3: <= 3.20.0 (no fix yet)

Description

Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go.

Related

Alias · CVE (1)

  • CVE-2023-46565 Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of… vulnerability

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References