CVE-2026-49943

CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP ASPATH mask matching implementation in nest/a-path.c. The aspathmatch function uses a fixed-size stack array of 2048 + 1 pmpos entries, while parsepath expands ASPATH segments from a received BGP...

DEBIAN-CVE-2026-48691

FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP ASPATH attribute encoder. In src/bgpprotocol.hpp, the IPv4UnicastAnnounce::getattributes function computes attributelength as 'sizeofbgpaspathsegmentelementt + this-aspathasns.size sizeofuint32t' and stores it in a...

CVE-2026-48685: Improper Handling of Length Parameter Inconsistency

FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set. In src/bgpprotocol.hpp, the parserawbgpattribute function correctly identifies when extendedlengthbit is set and sets lengthoflengthfield...

EUVD-2023-45878

Malicious code in bioql PyPI...

EUVD-2024-38075

Malicious code in bioql PyPI...

EUVD-2024-38352

Malicious code in bioql PyPI...

CVE-2023-41376

Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...

CVE-2024-39564

This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to...

CVE-2024-39549

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not...

CVE-2024-39549

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not...

CVE-2024-39549 Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not...

CVE-2024-39549 Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not...

CVE-2024-39549

CVE-2024-39549 affects Junos OS and Junos OS Evolved. A crafted BGP Path attribute update can trigger a Missing Release of Memory after Effective Lifetime in the routing process daemon (rpd), causing memory to be allocated but not freed in all paths and leading to a DoS. Impact is memory exhausti...

CVE-2024-39549: Missing Release of Memory after Effective Lifetime

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not...

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

Juniper Junos OS Vulnerability (JSA83011)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83011 advisory. - An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a network based,...

CVE-2023-41376: Always-Incorrect Control Flow Implementation

Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...

PT-2023-27934 · Nokia · Nokia Service Router Operating System +1

Name of the Vulnerable Software and Affected Versions: Nokia Service Router Operating System SR OS version 22.10 SR Linux Description: The issue arises when error-handling update-fault-tolerance is not enabled, leading to the mishandling of BGP path attributes. Recommendations: For Nokia Service...

PT-2014-2295

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.250SY1 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, through vectors involving BGP path attributes. Recommendations For versions prior to 12.250SY1,...

CVE-2012-5039: Undefined Security Weakness

The BGP Router process in Cisco IOS before 12.250SY1 allows remote attackers to cause a denial of service memory consumption via vectors involving BGP path attributes, aka Bug ID CSCsw63003...