CVE-2025-43970
GoBGP does not properly check the input length
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
CVE-2025-43970- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Weakness
- CWE-1284
- Updated
- 2026-11-02
EUVDEUVD-2025-12350
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
EUVD-2025-12350- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hqhq-hp5x-xp3w
GoBGP does not properly check the input length
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
GHSA-hqhq-hp5x-xp3w- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Weakness
- CWE-1284
- Updated
- 2026-11-02
NVD
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
CVE-2025-43970- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-1284
- Updated
- 2026-11-02
OSV
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
CVE-2025-43970- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Weakness
- CWE-1284
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-43970
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
DEBIAN-CVE-2025-43970- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-hqhq-hp5x-xp3w
GoBGP does not properly check the input length
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
GHSA-hqhq-hp5x-xp3w- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Weakness
- CWE-1284
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-43970
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).
- Record
UBUNTU-CVE-2025-43970- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVGO-2025-3630 No score
GoBGP does not properly check the input length in github.com/osrg/gobgp
GoBGP does not properly check the input length in github.com/osrg/gobgp
- Record
GO-2025-3630- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15017-1 No score
govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250422T181640-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15017-1- Updated
- 2026-11-02
OSVUSN-7661-1 No score
gobgp vulnerabilities
It was discovered that GoBGP did not properly manage memory under certain circumstances, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 22.04 LTS and Ubuntu 20.04 LTS. (CVE-2023-46565)
It was discovered that GoBGP did not properly verify the length of certain inputs. An attacker could possibly use this issue to cause a panic resulting in a denial of service. (CVE-2025-43970, CVE-2025-43971, CVE-2025-43972, CVE-2025-43973)
- Record
USN-7661-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/osrg/gobgpGo |
before 3.35.0 | 3.35.0 |
github.com/osrg/gobgp/v3Go |
before 3.35.0 | 3.35.0 |
gobgpDebian:12 |
All versions, plus listed versions 3.10.0-13.16.0-13.19.0-13.21.0-13.23.0-1 Show 22 moreShow less3.25.0-13.27.0-13.28.0-13.29.0-13.30.0-13.31.0-13.32.0-13.33.0-13.35.0-13.36.0-13.36.0-24.3.0-14.4.0-14.5.0-14.5.0-1~bpo13+14.6.0-14.6.0-24.6.0-2~bpo13+14.7.0-14.7.0-1~bpo13+14.8.0-14.8.0-2~exp1 |
None known |
gobgpDebian:13 |
before 3.35.0-1 | 3.35.0-1 |
gobgpDebian:14 |
before 3.35.0-1 | 3.35.0-1 |
github.com/osrg/gobgpGo |
All versions | None known |
gobgpUbuntu:Pro:18.04:LTS |
before 1.29-1ubuntu0.1+esm1, plus listed versions 1.15-11.29-1 |
1.29-1ubuntu0.1+esm1 |
gobgpUbuntu:Pro:20.04:LTS |
before 2.12.0-1ubuntu0.1~esm2, plus listed versions 1.33-12.11.0-12.12.0-12.12.0-1ubuntu0.1~esm1 |
2.12.0-1ubuntu0.1~esm2 |
gobgpUbuntu:Pro:22.04:LTS |
before 2.25.0-3ubuntu0.1+esm2, plus listed versions 2.25.0-22.25.0-32.25.0-3build12.25.0-3ubuntu0.12.25.0-3ubuntu0.1+esm1 |
2.25.0-3ubuntu0.1+esm2 |
gobgpUbuntu:Pro:24.04:LTS |
before 3.23.0-1ubuntu0.3+esm2, plus listed versions 3.16.0-1build13.19.0-13.21.0-13.23.0-13.23.0-1ubuntu0.1 Show 4 moreShow less3.23.0-1ubuntu0.23.23.0-1ubuntu0.2+esm13.23.0-1ubuntu0.33.23.0-1ubuntu0.3+esm1 |
3.23.0-1ubuntu0.3+esm2 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gobgpUbuntu:Pro:18.04:LTS From an advisory covering 5 CVEs |
before 1.29-1ubuntu0.1+esm1, plus listed versions 1.15-11.29-1 |
1.29-1ubuntu0.1+esm1 |
gobgpUbuntu:Pro:20.04:LTS From an advisory covering 5 CVEs |
before 2.12.0-1ubuntu0.1~esm2, plus listed versions 1.33-12.11.0-12.12.0-12.12.0-1ubuntu0.1~esm1 |
2.12.0-1ubuntu0.1~esm2 |
gobgpUbuntu:Pro:22.04:LTS From an advisory covering 5 CVEs |
before 2.25.0-3ubuntu0.1+esm2, plus listed versions 2.25.0-22.25.0-32.25.0-3build12.25.0-3ubuntu0.12.25.0-3ubuntu0.1+esm1 |
2.25.0-3ubuntu0.1+esm2 |
gobgpUbuntu:Pro:24.04:LTS From an advisory covering 5 CVEs |
before 3.23.0-1ubuntu0.3+esm2, plus listed versions 3.16.0-1build13.19.0-13.21.0-13.23.0-13.23.0-1ubuntu0.1 Show 4 moreShow less3.23.0-1ubuntu0.23.23.0-1ubuntu0.2+esm13.23.0-1ubuntu0.33.23.0-1ubuntu0.3+esm1 |
3.23.0-1ubuntu0.3+esm2 |
govulncheck-vulndbopenSUSE:Tumbleweed From an advisory covering 23 CVEs |
before 0.0.20250422T181640-1.1 | 0.0.20250422T181640-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-43970 is a medium vulnerability (CVSS 4.3) in Gobgp, published April 21, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in github.com/osrg/gobgp 3.35.0.
References
github.com/osrg/gobgp/compare/v3.34.0...v3.35.0
nvd.nist.gov/vuln/detail/CVE-2025-43970
security-tracker.debian.org/tracker/CVE-2025-43970
Show 32 moreShow less
ubuntu.com/security/CVE-2025-43970
cve.org/CVERecord?id=CVE-2025-43970
lists.opensuse.org/archives/list/[email protected]/thread/XCF7AZBKQYAQXK32J6F54H6NREFBK2V7
suse.com/security/cve/CVE-2019-15119