ROS-20260819-73-0039

The vulnerability in gobgp is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-37462

A flaw was found in gobgp. An integer underflow vulnerability in the BGPUpdate.DecodeFromBytes function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This can disrupt network operations and make the affected...

GO-2026-5971 GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function in github.com/osrg/gobgp

GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function in github.com/osrg/gobgp...

GO-2026-5525 GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp

GoBGP has a panic in AdjRib.Update via malformed BGP Update message Nil Pointer Dereference in github.com/osrg/gobgp...

CVE-2026-49837

creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:07+00:00| published-proof-of-concept| https://github.com/osrg/gobgp/security/advisories/GHSA-gjrg-jjr3-56cm...

CVE-2026-49838

creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:04+00:00| published-proof-of-concept| https://github.com/osrg/gobgp/security/advisories/GHSA-frrj-87jh-2772...

GHSA-FRRJ-87JH-2772 GoBGP confederation validation panics on empty AS_PATH attribute

Found through variant analysis based on CVE-2026-41643 Summary GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP UPDATE validator: a malformed UPDATE that should be rejected a...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the validation process for BGP UPDATE messages containing an empty ASPATH attribute. An attacker can cause a panic and terminate the peer session by sending a malformed UPDATE with a zero-length...

GHSA-GJRG-JJR3-56CM GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries

Summary GoBGP contains a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded by the declared capability length, CapLen. A malformed BGP OPEN message can cause bytes from a following...

GO-2026-5699 GoBGP has Improper Restriction of Operations within the Bounds of a Memory Buffer in github.com/osrg/gobgp

GoBGP has Improper Restriction of Operations within the Bounds of a Memory Buffer in github.com/osrg/gobgp...

GO-2026-5665 GoBGP has an Improper Resource Shutdown or Release in github.com/osrg/gobgp

GoBGP has an Improper Resource Shutdown or Release in github.com/osrg/gobgp...

GO-2026-5713 GoBGP has an out-of-bounds read in the ParseIP6Extended function in github.com/osrg/gobgp

GoBGP has an out-of-bounds read in the ParseIP6Extended function in github.com/osrg/gobgp...

PT-2026-57024

Name of the Vulnerable Software and Affected Versions gobgp affected versions not specified Description GoBGP fails to properly handle BGP UPDATE messages containing a zero-length AS PATH attribute. When a configured confederation eBGP peer sends a malformed UPDATE with a syntactically valid AS...

CVE-2026-41642

A flaw was found in GoBGP 4.3.0. A malformed BGP UPDATE with an unrecognized Path Attribute marked as well-known is not rejected cleanly, triggering a nil pointer dereference that crashes the GoBGP daemon. Fixed in GoBGP 4.4.0...

CVE-2026-41643

A flaw was found in GoBGP. A remote attacker could send a specially crafted Border Gateway Protocol BGP UPDATE message that exploits improper handling of 4-byte Autonomous System AS attributes, causing an internal slice index shift. This leads to a runtime error, resulting in a Denial of Service...

Linux Distros Unpatched Vulnerability : CVE-2026-49837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - gobgp - None Ubuntu Linux - Unknown description CVE-2026-49837 Note that Nessus relies on the presence of the package as reported by the vendor...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GoBGP vulnerabilities (USN-8348-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8348-1 advisory. It was discovered that GoBGP incorrectly handled certain specially crafted BGP UPDATE messages. A remote...

Linux Distros Unpatched Vulnerability : CVE-2026-37462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow in the BGPUpdate.DecodeFromBytes function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a...

GHSA-PW7P-7FQV-HPJ8 GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function

An integer underflow in the BGPUpdate.DecodeFromBytes function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted BGP UPDATE message...

Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound in the DecodeFromBytes function. An attacker can trigger a nil pointer dereference and panic by supplying a malicious BGP UPDATE message with a declared section length shorter than the actual data...