CVE-2025-43973
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 21, 2025
Updated: May 8, 2025
CWE ID 193
Summary
CVE-2025-43973 is a vulnerability affecting GoBGP versions prior to 3.35.0. This issue lies in the pkg/packet/rtr/rtr.go module, where input length is not verified for RTR messages, potentially allowing an attacker to send maliciously crafted messages that could lead to unintended behavior or denial of service. The lack of verification may result in the software processing incomplete or incorrect data, posing a security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- OSRG