CVE-2026-54345
Description
A flaw was found in GoPacket. The Diameter Attribute-Value Pair (AVP) decoder incorrectly calculates the AVP data length. By sending a specially crafted Diameter message, a remote unauthenticated attacker can cause an integer underflow, leading to an unbounded memory allocation of approximately 4 gigabytes (GiB). This can result in a denial of service (DoS) by exhausting system resources and crashing the affected collector.
Statement
This vulnerability is rated as Important severity because an unauthenticated remote attacker can trigger excessive memory consumption and crash listening processes without requiring credentials. Red Hat products and default installations do not expose network services that parse Diameter traffic using GoPacket, substantially reducing the likelihood of exposure. Exploitation is strictly constrained to custom applications or monitoring utilities that directly ingest untrusted Diameter protocol packets through this library.
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Crash, Exit, or Restart; DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory); DoS: Instability
This weakness will generally lead to undefined behavior and therefore crashes. In the case of overflows involving loop index variables, the likelihood of infinite loops is also high.
Integrity
Technical Impact: Modify Memory
If the value in question is important to data (as opposed to flow), simple data corruption has occurred. Also, if the wrap around results in other conditions such as buffer overflows, further memory corruption may occur.
Confidentiality,Availability,Access Control
Technical Impact: Execute Unauthorized Code or Commands; Bypass Protection Mechanism
This weakness can sometimes trigger buffer overflows which can be used to execute arbitrary code. This is usually outside the scope of a program's implicit security policy.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
