Golang github gopacket gopacket: gopacket provides packet processing capabilities for Go. (CVE-2026-65819)
Description
Gopacket, a Go library for packet processing, contains a vulnerability in versions up to 1.7.0 where multiple layer decoders use attacker-controlled lengths, counts, or offsets without proper validation. This flaw can cause an unrecovered panic when decoding crafted packets, leading to a remote denial of service. A patch addressing this issue is available.
CVSS v3.1
Score 7.5high
Affected software
pkg:deb/ubuntu/golang-github-gopacket-gopacket?arch=source&distro=noblepkg:deb/ubuntu/golang-github-gopacket-gopacket?arch=source&distro=stonkingpkg:deb/ubuntu/golang-github-gopacket-gopacket?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The golang-github-gopacket-gopacket library through version 1.7.0 has a vulnerability (CVE-2026-65819) where multiple layer decoders accept attacker-controlled lengths, counts, or offsets before validating them against packet buffers. This improper validation allows a crafted packet processed via DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic, resulting in a remote denial of service condition. A patch commit identified by hash 210f25f is available to fix this issue.
Potential Impact
An attacker can remotely cause a denial of service by sending specially crafted packets that trigger an unrecovered panic in the packet decoding process. There is no impact on confidentiality or integrity reported.
Mitigation Recommendations
A patch fixing this vulnerability is available. Users should apply the official patch to versions up to 1.7.0 to prevent denial of service. No other mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-65819
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:24.04:LTS","Ubuntu:26.10","Ubuntu:26.04:LTS"]
- Cvss Version
- 3.1
Threat ID: 6ad3f5b52cdf04f656662841
Added to database: 10/17/2026, 22:24:53 UTC
Last enriched: 10/18/2026, 00:12:09 UTC
Last updated: 10/18/2026, 00:12:09 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.