VYPR

Gopacket

by Gopacket

Source repositories

CVEs (3)

  • CVE-2026-65819HigAug 7, 2026
    risk 0.42cvss 7.5epss 0.00

    gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or…

  • CVE-2026-54345HigJul 28, 2026
    risk 0.42cvss 7.5epss 0.00

    gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the…

  • CVE-2026-54332HigJul 28, 2026
    risk 0.42cvss 7.5epss 0.00

    gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an attacker-controlled 32-bit community count and AS path member count and sizes a slice allocation from those counts without…