Threats tagged 'ghsa-w88c-9vg8-cmq8'

GoBGP versions prior to 4.4.0 contain a vulnerability in the BMP Parser component where improper restriction of operations within memory buffer bounds leads to an out-of-bounds read. This flaw affects the BMPPeerUpNotification.ParseBody and BMPStatisticsReport.ParseBody functions in the pkg/packet/bmp/bmp.go file. The vulnerability can be exploited remotely and may cause a denial of service due to application instability. Upgrading to version 4.4.0 resolves the issue.