{"id":"EUVD-2025-12349","enisaUuid":"0c2cf540-e0b1-35ce-9471-19690517f693","description":"An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.","datePublished":"Apr 21, 2025, 12:00:00 AM","dateUpdated":"Apr 21, 2025, 1:55:21 AM","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","references":"https://github.com/osrg/gobgp/compare/v3.34.0...v3.35.0\nhttps://github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986\n","aliases":"CVE-2025-43971\nGHSA-7m35-vw2c-696v\n","assigner":"mitre","epss":0.57,"enisaIdProduct":[{"id":"c83a821b-ff0f-3102-a4d7-ed37e6a52357","product":{"name":"GoBGP","vendor":{"name":"osrg"}},"product_version":"0 \u003c3.35.0"}],"enisaIdVendor":[{"id":"2637f6c8-5e00-326e-b3b8-1ddf11bee627","vendor":{"name":"GoBGP"}}],"enisaIdVulnerability":[{"id":"53ed49b2-9e9e-3aeb-a785-7105cbf71fd5","vulnerability":{"id":"CVE-2025-43971","description":"An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.","datePublished":"Apr 21, 2025, 12:00:00 AM","dateUpdated":"Apr 21, 2025, 1:55:21 AM","status":"PUBLISHED","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","references":"https://github.com/osrg/gobgp/compare/v3.34.0...v3.35.0\nhttps://github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986\n","enisa_id":"EUVD-2025-12349\n","assigner":"mitre","epss":0.57,"dataProcessed":"Nov 15, 2026, 5:14:40 AM","vulnerabilityProduct":[{"id":"bbc94563-aab2-3f9e-8a9a-6f129eb1d61d","product":{"name":"GoBGP","vendor":{"name":"osrg"}},"product_version":"0 \u003c3.35.0"}],"vulnerabilityVendor":[{"id":"b6b6cc4f-f910-3715-a3e1-e60be367bf6a","vendor":{"name":"GoBGP"}}]}},{"id":"c0d35b14-1263-3fe1-a0b1-2f925f521213","vulnerability":{"id":"GHSA-7m35-vw2c-696v","description":"GoBGP panics due to a zero value for softwareVersionLen","datePublished":"Apr 21, 2025, 3:30:18 AM","dateUpdated":"Mar 12, 2026, 5:22:08 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-43971\nhttps://github.com/osrg/gobgp/commit/08a001e06d90e8bcc190084c66992f46f62c0986\nhttps://github.com/osrg/gobgp\nhttps://github.com/osrg/gobgp/compare/v3.34.0...v3.35.0\nhttps://security-tracker.debian.org/tracker/CVE-2025-43971\n","enisa_id":"EUVD-2025-12349\n","aliases":"CVE-2025-43971\nGHSA-7m35-vw2c-696v\n","epss":0.0,"dataProcessed":"Nov 15, 2026, 2:42:45 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"1f8e09ba-988a-3fdc-81bf-8905d871d4d2","advisory":{"id":"openSUSE-SU-2025:15017-1","description":"govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media","datePublished":"Apr 23, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:31:35 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15017-1.json\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCF7AZBKQYAQXK32J6F54H6NREFBK2V7/\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XCF7AZBKQYAQXK32J6F54H6NREFBK2V7/\nhttps://www.suse.com/security/cve/CVE-2019-15119/\nhttps://www.suse.com/security/cve/CVE-2025-1386/\nhttps://www.suse.com/security/cve/CVE-2025-2424/\nhttps://www.suse.com/security/cve/CVE-2025-24358/\nhttps://www.suse.com/security/cve/CVE-2025-2475/\nhttps://www.suse.com/security/cve/CVE-2025-24839/\nhttps://www.suse.com/security/cve/CVE-2025-24866/\nhttps://www.suse.com/security/cve/CVE-2025-2564/\nhttps://www.suse.com/security/cve/CVE-2025-27538/\nhttps://www.suse.com/security/cve/CVE-2025-27571/\nhttps://www.suse.com/security/cve/CVE-2025-27936/\nhttps://www.suse.com/security/cve/CVE-2025-30206/\nhttps://www.suse.com/security/cve/CVE-2025-31363/\nhttps://www.suse.com/security/cve/CVE-2025-32093/\nhttps://www.suse.com/security/cve/CVE-2025-32431/\nhttps://www.suse.com/security/cve/CVE-2025-32445/\nhttps://www.suse.com/security/cve/CVE-2025-32793/\nhttps://www.suse.com/security/cve/CVE-2025-32963/\nhttps://www.suse.com/security/cve/CVE-2025-3801/\nhttps://www.suse.com/security/cve/CVE-2025-43970/\nhttps://www.suse.com/security/cve/CVE-2025-43971/\nhttps://www.suse.com/security/cve/CVE-2025-43972/\nhttps://www.suse.com/security/cve/CVE-2025-43973/\n","aliases":"CVE-2019-15119\nCVE-2025-1386\nCVE-2025-2424\nCVE-2025-24358\nCVE-2025-2475\nCVE-2025-24839\nCVE-2025-24866\nCVE-2025-2564\nCVE-2025-27538\nCVE-2025-27571\nCVE-2025-27936\nCVE-2025-30206\nCVE-2025-31363\nCVE-2025-32093\nCVE-2025-32431\nCVE-2025-32445\nCVE-2025-32793\nCVE-2025-32963\nCVE-2025-3801\nCVE-2025-43970\nCVE-2025-43971\nCVE-2025-43972\nCVE-2025-43973\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0b07f221-92ad-3b1f-a172-33635ea863f1","product":{"name":"govulncheck-vulndb-0.0.20250422T181640-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1a1c3148-3f34-3b7a-9147-c25eaa958c2b","product":{"name":"govulncheck-vulndb-0:0.0.20250422T181640-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"45a6771f-2c89-3e4b-a74d-e99249bed7dd","product":{"name":"govulncheck-vulndb-0.0.20250422T181640-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"54cdc794-11cc-3a0c-9698-bb7f7f211b2f","product":{"name":"govulncheck-vulndb-0.0.20250422T181640-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6e3940a1-cbff-38a3-8488-327e61e6e2f7","product":{"name":"govulncheck-vulndb-0.0.20250422T181640-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7aafb140-707c-31ac-8136-d4c1cc34a8b9","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a279aaab-df0d-389c-ac3d-36fd4cbacac0","product":{"name":"govulncheck-vulndb-0:0.0.20250422T181640-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"aeb659de-0ebb-3733-805b-162408d2268c","product":{"name":"govulncheck-vulndb-0:0.0.20250422T181640-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"bef05be2-6bd7-3cd6-a03a-98e6d46b6499","product":{"name":"govulncheck-vulndb-0:0.0.20250422T181640-1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}