ip6defrag

May 1, 2026 GO-2026-6121 +1 more

  GO-2026-6121: GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) in github.com/gopacket/gopacket

  GO-2026-6122: GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS in github.com/gopacket/gopacket

Changes in this version

+ type IPv6Defragmenter struct

+ func NewIPv6Defragmenter() *IPv6Defragmenter

+ func (d *IPv6Defragmenter) DefragIPv6(ipv6 *layers.IPv6, fg *layers.IPv6Fragment) *layers.IPv6

+ func (d *IPv6Defragmenter) DiscardOlderThan(t time.Time) int