CVE-2026-54345— GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)
Possible ATT&CK Techniques 2AI
T1190 · Exploit Public-Facing Application T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-54345
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)
Source: CVE Program / CVE List V5
Vulnerability Description
gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the 12-byte header underflows the unsigned 32-bit value and drives an unbounded allocation of roughly 4 GiB, and two such messages in succession OOM-kill a collector, causing an unauthenticated remote denial of service. This issue is fixed in version 1.6.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-54345
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-54345
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-54345 (1)
Vendor Advisories for CVE-2026-54345 (1)
Vendor Pages for CVE-2026-54345 (1)
- 🔗 Release v1.6.1 · gopacket/gopacket · GitHubx_refsource_MISC
IV. Related Vulnerabilities
Same weakness: CWE-191
- CVE-2026-54890
BEAM VM crash via integer underflow in binary_to_term BIT_BI - CVE-2026-66033
libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation - CVE-2026-48296
CAI Content Credentials | Integer Underflow (Wrap or Wraparo - CVE-2026-48298
CAI Content Credentials | Integer Underflow (Wrap or Wraparo - CVE-2026-55039
Microsoft Excel Remote Code Execution Vulnerability
V. Comments for CVE-2026-54345
No comments yet