noi/gopacket
1
Fork 0
Code Issues 14 Pull requests Projects Releases Packages Wiki Activity Actions
Labels Milestones
Search syntax
assignee:<username> Filter by assigned user
author:<username> Filter by the author
is:all All
is:closed Closed
is:open Open
mentions:<username> Filter by mentioned user
modified:[>|<]<date> Filter by last modified date
review:<username> Filter by user who reviewed
sort:<by>:[asc|desc] Sort by: created|comments|updated|deadline
New issue
14 Open 0 Closed 14 All
Label
Clear labels
core
cpu-dos
critical
dos
evasion
has-poc
high
integer-overflow
ip4defrag
layers
low
medium
memory-exhaustion
other
panic
pcapgo
pentest-2026-08
rce
tcpassembly
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
No assignee
claude
noi
reassembly: the newer package has the same SYN-payload substitution as tcpassembly, by a different mechanism
evasion
has-poc
high
pentest-2026-08
tcpassembly
#14 opened 2026-08-26 10:15:30 +00:00 by claude
layers/dns: name-decompression bomb — one 65 KB packet retains 377 MB, ~21 packets OOM an 8 GB box
dos
has-poc
high
layers
memory-exhaustion
pentest-2026-08
1
#13 opened 2026-08-26 10:09:10 +00:00 by claude
core: no cap on layer nesting — 64 KB packet decodes to 16,002 layers, and Dump() turns it into 45 MB and 68 ms
core
cpu-dos
dos
has-poc
medium
memory-exhaustion
pentest-2026-08
#12 opened 2026-08-26 10:04:30 +00:00 by claude
layers: 26 decoders index past their own length guard on short input — a 15-byte frame reaches most of them
has-poc
integer-overflow
layers
medium
panic
pentest-2026-08
2
#11 opened 2026-08-26 10:02:38 +00:00 by claude
pcapgo: readers size allocations from file-supplied lengths — 40-byte file → 1 GB alloc, and a 40-byte snoop file panics
has-poc
medium
memory-exhaustion
panic
pcapgo
pentest-2026-08
2
#10 opened 2026-08-26 09:58:18 +00:00 by claude
layers/geneve: uint8 offset overflow moves the inner-frame boundary 256 bytes — everything in the tunnel is decoded from the wrong bytes
evasion
has-poc
high
integer-overflow
layers
pentest-2026-08
#9 opened 2026-08-26 09:57:29 +00:00 by claude
layers/geneve: seven zero bytes panic the decoder — two off-by-one length guards
has-poc
high
layers
panic
pentest-2026-08
#8 opened 2026-08-26 09:57:00 +00:00 by claude
ip4defrag: the "fragment will overrun" security check is vacuous — uint16 wraparound in securityChecks
has-poc
integer-overflow
ip4defrag
medium
pentest-2026-08
1
#7 opened 2026-08-26 09:53:50 +00:00 by claude
ip4defrag: build() emits a reassembled IPv4 layer whose Length field lies about its own Payload
evasion
has-poc
ip4defrag
medium
pentest-2026-08
1
#6 opened 2026-08-26 09:53:27 +00:00 by claude
flows: Flow.FastHash is commutative by design — any tool keying connections on it merges four 4-tuples into one
core
evasion
has-poc
medium
pentest-2026-08
1
#5 opened 2026-08-26 09:53:04 +00:00 by claude
tcpassembly: 4.35 MB of descending-sequence segments costs 36 s of CPU — quadratic insertion with unlimited buffering by default
cpu-dos
dos
has-poc
high
memory-exhaustion
pentest-2026-08
tcpassembly
1
#4 opened 2026-08-26 09:52:37 +00:00 by claude
tcpassembly: a SYN payload lets the attacker choose, byte for byte, the request the analyser reconstructs
evasion
has-poc
high
pentest-2026-08
tcpassembly
2
#3 opened 2026-08-26 09:52:08 +00:00 by claude
ip4defrag: overlapping fragment sets never reassemble — broken currentOffset arithmetic plus a silent fragment drop
evasion
has-poc
high
ip4defrag
pentest-2026-08
3
#2 opened 2026-08-26 09:51:38 +00:00 by claude
ip4defrag: 3 fragments (254-byte pcap) panic the defragmenter — two independent root causes, one needs no truncation at all
critical
dos
has-poc
ip4defrag
panic
pentest-2026-08
2
#1 opened 2026-08-26 09:50:55 +00:00 by claude