Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
osrg/gobgp
master @ 8b5edc2
114
Fixes
16
CVEs
HIGH
Peak severity
48.7%
Coverage
Highlights
Denial of Service: 108 prior fixes. Scrutinize any change in this area.
pkg/packet/bgp/bgp.go: most-fixed (23 issues). Treat as high-risk during review.
73 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: The BGP parser is the primary attack surface; it suffers from frequent out-of-bounds reads, slice index panics, and integer underflows when processing malformed or truncated path attributes, capability structures, or NLRIs from unauthenticated peers. Tight boundary validations and safe arithmetic calculations are essential during slicing operations.
Denial of Service: RTR message processing lacks consistent length-checks before slice parsing and allocation, making the system vulnerable to memory exhaustion (OOM) and out-of-bounds slice crashes on short packets.
Denial of Service: MRT parsing code is prone to integer underflows and slice index wrapping on large lengths, exposing the system to crashes during offline diagnostic injection or MRT stream processing.