← Database

CVE-2025-43970

MEDIUM CVSS: 4.3 Published: 2025-04-21 Modified: 2026-06-17

Description

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).

Affected Platforms

Osrg Gobgp

Weakness Type

CWE-1284, CWE-1284

References