CVE-2026-48685: Improper Handling of Length Parameter Inconsistency

FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set. In src/bgpprotocol.hpp, the parserawbgpattribute function correctly identifies when extendedlengthbit is set and sets lengthoflengthfield...

EUVD-2023-45878

Malicious code in bioql PyPI...

CVE-2023-41376

Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...

CVE-2024-39549

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not...

CVE-2024-39549 Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not...

CVE-2023-41376: Always-Incorrect Control Flow Implementation

Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...

PT-2023-27934 · Nokia · Nokia Service Router Operating System +1

Name of the Vulnerable Software and Affected Versions: Nokia Service Router Operating System SR OS version 22.10 SR Linux Description: The issue arises when error-handling update-fault-tolerance is not enabled, leading to the mishandling of BGP path attributes. Recommendations: For Nokia Service...

PT-2014-2295

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.250SY1 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, through vectors involving BGP path attributes. Recommendations For versions prior to 12.250SY1,...

CVE-2012-5039: Undefined Security Weakness

The BGP Router process in Cisco IOS before 12.250SY1 allows remote attackers to cause a denial of service memory consumption via vectors involving BGP path attributes, aka Bug ID CSCsw63003...