← Database

CVE-2025-43972

MEDIUM CVSS: 6.8 Published: 2025-04-21 Modified: 2026-06-17

Description

An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context.

Affected Platforms

Osrg Gobgp

Weakness Type

CWE-1284, CWE-1284

References