Vulnerability GO-2026-5266
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
July 24, 2026 at 06:35 PM UTC
GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE in github.com/osrg/gobgp
v4.0.0 - v4.2.0
v4.0.0 - v4.2.0
Summary
GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE in github.com/osrg/gobgp
Details
GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE in github.com/osrg/gobgp
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute in github.com/osrg/gobgp
v4.3.0 GO-2026-5198
v4.3.0 GO-2026-5198
Unknown
2 months ago
GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp
v4.4.0 GO-2026-5525
v4.4.0 GO-2026-5525
Unknown
2 months ago
GoBGP confederation validation panics on empty AS_PATH attribute in github.com/osrg/gobgp
v4.0.0 - v4.6.0 GO-2026-5954
v4.0.0 - v4.6.0 GO-2026-5954
Unknown
2 months ago
GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries in github.com/osrg/gobgp
v4.0.0 - v4.5.0 GO-2026-5955
v4.0.0 - v4.5.0 GO-2026-5955
Unknown
2 months ago
GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function in github.com/osrg/gobgp
v4.0.0 - v4.3.0 GO-2026-5971
v4.0.0 - v4.3.0 GO-2026-5971
Impacted packages
Timeline
Published
2 months ago
July 24, 2026 at 06:35 PM UTC
Last Modified
2 months ago
July 24, 2026 at 07:00 PM UTC