VDB
Sign up
—

GO-2026-6122

GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS in github.com/gopacket/gopacket

Quick fix

GO-2026-6122 — github.com/gopacket/gopacket: upgrade to the fixed version with the command below.

go get github.com/gopacket/gopacket@v1.6.1

Details

GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS in github.com/gopacket/gopacket

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/gopacket/gopacket
Introduced in: 0Fixed in: 1.6.1
Fixgo get github.com/gopacket/gopacket@v1.6.1

References