gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an attacker-controlled 32-bit community count and AS path member count and sizes a slice allocation from those counts without bounding them against the bytes remaining in the datagram, so a 104-byte UDP datagram can drive an allocation of up to 16 GiB and cause an unauthenticated remote denial of service. This issue is fixed in version 1.6.1.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Gopacket Gopacket
cpe:2.3:a:gopacket:gopacket:*:*:*:*:*:go:*:*
|
— |
1.6.1
|
References 3
https://github.com/gopacket/gopacket/commit/76119086f5936aacd7088bdf97d565501bb…
security-advisories@github.com
https://github.com/gopacket/gopacket/releases/tag/v1.6.1
security-advisories@github.com
https://github.com/gopacket/gopacket/security/advisories/GHSA-g6v3-7xmc-w563
security-advisories@github.com