This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-54345 | BDVDB-2026-353267 Detail

gopacketgopacket

Description#

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the 12-byte header underflows the unsigned 32-bit value and drives an unbounded allocation of roughly 4 GiB, and two such messages in succession OOM-kill a collector, causing an unauthenticated remote denial of service. This issue is fixed in version 1.6.1.

Impact#

Per CVSS v4.0: confidentiality impact none, integrity impact none, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-191 Integer Underflow (Wrap or Wraparound)
  • CWE-770 Allocation of Resources Without Limits or Throttling

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.