CVE-2025-43970 - CVE House
Back to Database
Status published Medium CVE-2025-43970

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does...

Vulnerability Description

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-43970

Credits & Attribution

No credits recorded in the NVD database.

References

More from GoBGP

View All →
CVE-2025-43973
An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does...
Medium 6.8
CVE-2025-43972
An issue was discovered in GoBGP before 3.35.0. An attacker...
Medium 6.8
CVE-2025-43971
An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows...
High 8.6

Affected Vendor

Affected Software

GoBGP
Vulnerable Versions:
0

Timeline

Official Publish: April 21st, 2025
Last Modified: April 21st, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Weaknesses (CWE)

CWE-1284

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.