CVE-2025-43972
Moderate
GoBGP crashes in the flowspec parser in github.com/osrg/gobgp
GoBGP crashes in the flowspec parser in github.com/osrg/gobgp
Exploit probability
0.5%
Published
April 22, 2025
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
107 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2025-43972
View original source
An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.
Open Source Vulnerabilities
GO-2025-3632
View original source
GoBGP crashes in the flowspec parser in github.com/osrg/gobgp
Open Source Vulnerabilities
GHSA-mfvv-mgf6-q25r
View original source
An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.
05 / REFERENCES
Further evidence
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43972.json
- https://github.com/osrg/gobgp/commit/ca7383f450f7b296c5389feceef2467de5ab6e5a
- https://github.com/osrg/gobgp/compare/v3.34.0...v3.35.0
- https://nvd.nist.gov/vuln/detail/CVE-2025-43972
- https://github.com/advisories/GHSA-mfvv-mgf6-q25r
- https://github.com/osrg/gobgp