CVE-2025-43971

High

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for…

mitre·CWE-193·Published 2025-04-21

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

144 chars

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.

NVDen

144 chars

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.

OSV.deven

80 chars

GoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp

GHSAen

168 chars

An issue was discovered in GoBGP before 3.35.0 (introduced in v3.11.0). pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.

NVDes

164 chars

Se descubrió un problema en GOBGP antes de 3.35.0. PKG/PACKET/BGP/BGP.GO permite a los atacantes causar un pánico a través de un valor cero para SoftwareVersionLen.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
3.1	Primary	cve.org	8.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H