CVE-2025-43971

Go/github.com/osrg/gobgp/v3 CVE-2025-43971: high 8.6

GoBGP panics due to a zero value for softwareVersionLen

Action: Upgrade github.com/osrg/gobgp/v3 to 3.35.0 or later.

go get github.com/osrg/gobgp/v3@v3.35.0

Affected

Fixed versions

Sources

• osv: GHSA-7m35-vw2c-696v
• https://nvd.nist.gov/vuln/detail/CVE-2025-43971
• https://github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986
• https://github.com/osrg/gobgp
• https://github.com/osrg/gobgp/compare/v3.34.0...v3.35.0
• https://security-tracker.debian.org/tracker/CVE-2025-43971

CVE-2025-43971 · published 2025-04-21T03:30:18Z · modified 2026-09-10T03:50:57.149924378Z · JSON

Go/github.com/osrg/gobgp CVE-2025-43971: unknown

GoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3631
• https://github.com/advisories/GHSA-7m35-vw2c-696v
• https://github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986
• https://github.com/osrg/gobgp/compare/v3.34.0...v3.35.0

CVE-2025-43971 · published 2025-04-22T18:16:40Z · modified 2026-02-04T04:03:12.456160Z · JSON

Go/github.com/osrg/gobgp/v3 CVE-2025-43971: unknown

GoBGP panics due to a zero value for softwareVersionLen in github.com/osrg/gobgp

Action: Upgrade github.com/osrg/gobgp/v3 to 3.35.0 or later.

go get github.com/osrg/gobgp/v3@v3.35.0

Affected

Fixed versions

Sources

• osv: GO-2025-3631#Go/github.com/osrg/gobgp/v3
• https://github.com/advisories/GHSA-7m35-vw2c-696v
• https://github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986
• https://github.com/osrg/gobgp/compare/v3.34.0...v3.35.0

CVE-2025-43971 · published 2025-04-22T18:16:40Z · modified 2026-02-04T04:03:12.456160Z · JSON