These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-65819 is a high-severity vulnerability in the gopacket library, used for packet processing in Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers. This allows a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. The vulnerab [truncated]
The gopacket library, used for packet processing in Go, has a vulnerability in version 1.6.0 and earlier. This vulnerability is related to the Diameter AVP decoder, which incorrectly calculates the AVP data length. This incorrect calculation leads to an unbounded allocation of roughly 4 GiB when processing a vendor-flagged AVP with a Length field smaller than the 12-byte header. As a result, an unauthenti [truncated]
The gopacket library, specifically version 1.6.0 and earlier, is affected by a vulnerability in the sFlow ExtendedGatewayFlow decoder. This vulnerability allows an attacker to cause an unauthenticated remote denial of service by providing a specially crafted 104-byte UDP datagram that can drive an allocation of up to 16 GiB. Users of gopacket should be aware of the potential for denial of service attacks [truncated]