GoBGP RTR Message Length Verification Vulnerability

A vulnerability exists in GoBGP versions prior to 3.35.0, where the RTR (Router) message length is not properly validated. This oversight allows for situations where the input length may not match the actual availability of bytes in an RTR message, potentially leading to unexpected behavior or exploitation.

Impact

Exploitation of this vulnerability could result in a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users can upgrade to GoBGP version 3.35.0 or later to address this vulnerability.