gopacket

Products

ProductCVEsExploitedLatest
gopacket4–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-119299 Medium 5.9 gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments 0.5%
  • CVE-2026-65819 High 7.5 gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser 0.4%
  • CVE-2026-54332 Medium 6.9 GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS 0.8%
  • CVE-2026-54345 Medium 6.9 GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) 0.8%