CVE-2023-46565: Buffer Overflow vulnerability in osrg gobgp

April 29, 2024 (updated September 6, 2024)

Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go.

References

github.com/advisories/GHSA-6rqv-5cg7-m4x3
github.com/osrg/gobgp
github.com/osrg/gobgp/commit/419c50dfac578daa4d11256904d0dc182f1a9b22
github.com/osrg/gobgp/issues/2725
nvd.nist.gov/vuln/detail/CVE-2023-46565

Code Behaviors & Features

Detect and mitigate CVE-2023-46565 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →