Executive brief
GoBGP does not verify that the input length in github.com/osrg/gobgp
Affected products
- Go github.com/osrg/gobgp
- Go github.com/osrg/gobgp/v3
Junglewise Threat Intelligence
CVE-2025-43973: GO-2025-3633 - GoBGP does not verify that the input length in github.com/osrg/gobgp
CVE-2025-43973 · Severity: low · CVSS 3.1 · Published 2025-04-22
Technologies: github.com/osrg/gobgp (Go), github.com/osrg/gobgp/v3 (Go). Vendors: Go.
Related threats
- osrg GoBGP out-of-bounds read in BMP Parser
- GO-2026-4736 - GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute in github.com/osrg/gobgp
- GO-2025-3632 - GoBGP crashes in the flowspec parser in github.com/osrg/gobgp
- GO-2025-3630 - GoBGP does not properly check the input length in github.com/osrg/gobgp
- GO-2025-3631 - GoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp