FlawAtlas
Search the atlas
CVE-2025-43971 High

GoBGP panics due to a zero value for softwareVersionLen

An issue was discovered in GoBGP before 3.35.0 (introduced in v3.11.0). pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.

Exploit probability 0.5%
Published April 21, 2025
Required by Not available
Last source change March 14, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

107 explicit affected versions

Go github.com/osrg/gobgp/v3
Go github.com/osrg/gobgp
Go github.com/osrg/gobgp/v3

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.

View original source
Open Source Vulnerabilities GHSA-7m35-vw2c-696v

An issue was discovered in GoBGP before 3.35.0 (introduced in v3.11.0). pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.

View original source
Open Source Vulnerabilities GO-2025-3631

GoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp

View original source

05 / REFERENCES

Further evidence