CyberRota Analysis
AI-GeneratedThe gopacket library, used for packet processing in Go, is vulnerable in versions 1.6.0 and earlier due to a flaw in the Diameter AVP decoder that allows an attacker to exploit an underflow condition, leading to unbounded memory allocation and potential out-of-memory (OOM) conditions. This results in an unauthenticated remote denial of service, which can crash the affected service. Organizations utilizing gopacket for network processing should prioritize upgrading to version 1.6.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the 12-byte header underflows the unsigned 32-bit value and drives an unbounded allocation of roughly 4 GiB, and two such messages in succession OOM-kill a collector, causing an unauthenticated remote denial of service. This issue is fixed in version 1.6.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)