6.3
CVE-2025-7464
- EPSS 0.41%
- Veröffentlicht 12.07.2025 06:32:06
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle cna@vuldb.com
- CVE-Watchlists
- Unerledigt
osrg GoBGP rtr.go SplitRTR out-of-bounds
A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is e748f43496d74946d14fed85c776452e47b99d64. It is recommended to apply a patch to fix this issue.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellerosrg
≫
Produkt
GoBGP
Version
3.0
Status
affected
Version
3.1
Status
affected
Version
3.2
Status
affected
Version
3.3
Status
affected
Version
3.4
Status
affected
Version
3.5
Status
affected
Version
3.6
Status
affected
Version
3.7
Status
affected
Version
3.8
Status
affected
Version
3.9
Status
affected
Version
3.10
Status
affected
Version
3.11
Status
affected
Version
3.12
Status
affected
Version
3.13
Status
affected
Version
3.14
Status
affected
Version
3.15
Status
affected
Version
3.16
Status
affected
Version
3.17
Status
affected
Version
3.18
Status
affected
Version
3.19
Status
affected
Version
3.20
Status
affected
Version
3.21
Status
affected
Version
3.22
Status
affected
Version
3.23
Status
affected
Version
3.24
Status
affected
Version
3.25
Status
affected
Version
3.26
Status
affected
Version
3.27
Status
affected
Version
3.28
Status
affected
Version
3.29
Status
affected
Version
3.30
Status
affected
Version
3.31
Status
affected
Version
3.32
Status
affected
Version
3.33
Status
affected
Version
3.34
Status
affected
Version
3.35
Status
affected
Version
3.36
Status
affected
Version
3.37.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.322 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 6.3 | 0 | 0 |
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 3.7 | 2.2 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
|
| cna@vuldb.com | 2.6 | 4.9 | 2.9 |
AV:N/AC:H/Au:N/C:N/I:N/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://vuldb.com/?id.316116
https://vuldb.com/?ctiid.316116
https://vuldb.com/?submit.610193
https://github.com/osrg/gobgp/commit/e748f43496d74946d14fed85c776452e47b99d64