Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
osrg GoBGP rtr.go SplitRTR out-of-bounds
Vulnerability Description
A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is e748f43496d74946d14fed85c776452e47b99d64. It is recommended to apply a patch to fix this issue.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
跨界内存读
Vulnerability Title
GoBGP 安全漏洞
Vulnerability Description
GoBGP是osrg开源的一种开源的边界网关协议（BGP）实现。 GoBGP 3.37.0及之前版本存在安全漏洞，该漏洞源于文件pkg/packet/rtr/rtr.go中函数SplitRTR存在越界读取。
CVSS Information
N/A
Vulnerability Type
N/A