Skip to main content

Off-by-one Error

CVE-2025-43973

Medium
6.8/10

Summary

An issue was discovered in GoBGP versions prior to 3.35.0. The file "pkg/packet/rtr/rtr.go" does not verify that the input length ensures all bytes are available for an RTR message.

  • HIGH
  • NETWORK
  • NONE
  • CHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-193 - Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References

Advisory Timeline

  • Published