The gopacket library, used for packet processing in Go, has a vulnerability in version 1.6.0 and earlier. This vulnerability is related to the Diameter AVP decoder, which incorrectly calculates the AVP data length. This incorrect calculation leads to an unbounded allocation of roughly 4 GiB when processing a vendor-flagged AVP with a Length field smaller than the 12-byte header. As a result, an unauthenti [truncated]
The gopacket library, specifically version 1.6.0 and earlier, is affected by a vulnerability in the sFlow ExtendedGatewayFlow decoder. This vulnerability allows an attacker to cause an unauthenticated remote denial of service by providing a specially crafted 104-byte UDP datagram that can drive an allocation of up to 16 GiB. Users of gopacket should be aware of the potential for denial of service attacks [truncated]
