HIGH7.5
GHSA-4p9m-8gc4-rw2h
GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute
Quick fix
GHSA-4p9m-8gc4-rw2h — github.com/osrg/gobgp/v4: upgrade to the fixed version with the command below.
go get github.com/osrg/gobgp/v4@v4.4.0Details
An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute.
Are you affected?
Enter the version of the package you're using.