CVE-2025-43971
HIGHDescription
An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.
Is your site exposed to CVE-2025-43971?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| osrg | gobgp |
References
Frequently Asked Questions
What is CVE-2025-43971? +
How severe is CVE-2025-43971? +
What products are affected by CVE-2025-43971? +
How do I check if I'm vulnerable to CVE-2025-43971? +
Related Vulnerabilities
Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collaborator can escalate their privileges to …
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula …
Off-by-one error in the MigTD's vmcall_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may …
OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH …
PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow …
JSON::XS versions from 3.04 before 4.05 for Perl write one byte past a heap buffer when appending a one-byte chunk …
