osrg GoBGP Out-of-Bounds Read Vulnerability in RTR Packet Parsing

A vulnerability allowing out-of-bounds read has been identified in osrg GoBGP versions up to 3.37.0. The issue arises in the SplitRTR function within pkg/packet/rtr/rtr.go, where the code improperly handles input data, leading to potential memory access violations. This vulnerability can be exploited remotely, although the attack's complexity is considered high.

Impact

Exploitation of this vulnerability causes a runtime panic due to invalid memory access, which can disrupt the application's normal operation.

Reproduction

The vulnerability can be reproduced by sending a 1-byte input to the SplitRTR function in the RTR packet processing module. This input length is insufficient, causing the function to access memory out of bounds, specifically at data[1], which triggers a panic.

Remediation

Users are advised to update to the patched version of osrg GoBGP, which is available on the project's GitHub repository.