363 matches found
CVE-2026-49838
GoBGP , an open-source BGP implementation in Go, is vulnerable to a denial-of-service in its BGP UPDATE validator prior to version 4.7.0 . When a confederation eBGP peer sends a malformed UPDATE containing a zero-length AS_PATH , the attribute passes initial decoding but triggers an unchecked p.V...
CVE-2026-49838 GoBGP confederation validation panics on empty AS_PATH attribute
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...
CVE-2026-49838
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...
CVE-2026-49837 GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...
EUVD-2026-75806
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...
CVE-2026-49837
GoBGP (open source BGP implementation in Go) versions prior to 4.6.0 contain a boundary validation flaw in the BGP OPEN capability parser. Several capability decoders read from the full remaining buffer instead of the slice bounded by the declared CapLen , allowing a malformed OPEN message to cau...
CVE-2026-49837 GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...
CVE-2026-49837 GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...
CVE-2026-49837: Out-of-bounds Read
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...
CVE-2026-49838: Improper Validation of Array Index
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...
ROS-20260907-73-0104
The vulnerability in gobgp is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260824-73-0012
The vulnerability in gobgp is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...
ROS-20260824-73-0013
The vulnerability in gobgp is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260824-73-0016
The vulnerability in gobgp is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...
ROS-20260824-73-0017
The vulnerability in gobgp is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
ROS-20260824-73-0014
The vulnerability in gobgp is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260824-73-0015
The vulnerability in gobgp is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...
ROS-20260819-73-0005
The vulnerability in gobgp is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...