High severity8.6NVD Advisory· Published Apr 21, 2025· Updated Jun 17, 2026
CVE-2025-43971
CVE-2025-43971
Description
An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/osrg/gobgp/v3Go | >= 3.11.0, < 3.35.0 | 3.35.0 |
Affected products
30- osv-coords29 versionspkg:apk/chainguard/cilium-1.15pkg:apk/chainguard/cilium-1.16pkg:apk/chainguard/cilium-1.16-clustermesh-apiserverpkg:apk/chainguard/cilium-1.16-container-initpkg:apk/chainguard/cilium-1.16-container-init-compatpkg:apk/chainguard/cilium-1.16-hubble-relaypkg:apk/chainguard/cilium-1.16-iptablespkg:apk/chainguard/cilium-1.16-operator-awspkg:apk/chainguard/cilium-1.16-operator-genericpkg:apk/chainguard/cilium-fips-1.15pkg:apk/chainguard/cilium-fips-1.16pkg:apk/chainguard/cilium-fips-1.16-clustermesh-apiserverpkg:apk/chainguard/cilium-fips-1.16-container-initpkg:apk/chainguard/cilium-fips-1.16-container-init-compatpkg:apk/chainguard/cilium-fips-1.16-host-utilspkg:apk/chainguard/cilium-fips-1.16-hubble-relaypkg:apk/chainguard/cilium-fips-1.16-operator-awspkg:apk/chainguard/cilium-fips-1.16-operator-azurepkg:apk/chainguard/cilium-fips-1.16-operator-genericpkg:apk/wolfi/cilium-1.15pkg:apk/wolfi/cilium-1.16pkg:apk/wolfi/cilium-1.16-container-initpkg:apk/wolfi/cilium-1.16-container-init-compatpkg:apk/wolfi/cilium-1.16-hubble-relaypkg:apk/wolfi/cilium-1.16-iptablespkg:apk/wolfi/cilium-1.16-operator-awspkg:apk/wolfi/cilium-1.16-operator-genericpkg:golang/github.com/osrg/gobgp/v3pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 1.15.19-r3+ 28 more
- (no CPE)range: < 1.15.19-r3
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.15.19-r7
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.16.9-r2
- (no CPE)range: < 1.15.19-r3
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: < 1.16.9-r1
- (no CPE)range: >= 3.11.0, < 3.35.0
- (no CPE)range: < 0.0.20250422T181640-1.1
Patches
Vulnerability mechanics
References
5- github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986nvdPatchWEB
- github.com/osrg/gobgp/compare/v3.34.0...v3.35.0nvdPatchRelease NotesWEB
- github.com/advisories/GHSA-7m35-vw2c-696vghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-43971ghsaADVISORY
- security-tracker.debian.org/tracker/CVE-2025-43971ghsaWEB
News mentions
0No linked articles in our index yet.