Vulnerability GO-2026-6121
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
August 18, 2026 at 02:32 PM UTC
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) in github.com/gopacket/gopacket
<1.6.1
<1.6.1
Summary
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) in github.com/gopacket/gopacket
Details
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) in github.com/gopacket/gopacket
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
13 hours ago
gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments
<1.7.2 GHSA-358w-w75h-x6rx
<1.7.2 GHSA-358w-w75h-x6rx
Unknown
2 months ago
GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS in github.com/gopacket/gopacket
<1.6.1 GO-2026-6122
<1.6.1 GO-2026-6122
Medium Risk
3 months ago
GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
<1.6.1 GHSA-g6v3-7xmc-w563
<1.6.1 GHSA-g6v3-7xmc-w563
Medium Risk
3 months ago
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)
<1.6.1 GHSA-6r28-9ppf-4hj5
<1.6.1 GHSA-6r28-9ppf-4hj5
Impacted packages
Timeline
Published
2 months ago
August 18, 2026 at 02:32 PM UTC
Fixed (v1.6.1)
5 months ago
June 04, 2026 at 08:44 PM UTC
Last Modified
2 months ago
August 18, 2026 at 03:00 PM UTC