Количество 8
Количество 8
BDU:2026-14523
Уязвимость обработчиков декодирования парсера BGP OPEN-сообщений модуля pkg/packet/bgp протокола пограничного шлюза GoBGP, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2026-49838
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP UPDATE validator: a malformed UPDATE that should be rejected as a malformed AS_PATH instead reaches an unchecked `p.Value[0]` access, allowing a configured confederation eBGP peer to trigger a denial of service. Version 4.7.0 patches the issue.
CVE-2026-49838
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP UPDATE validator: a malformed UPDATE that should be rejected as a malformed AS_PATH instead reaches an unchecked `p.Value[0]` access, allowing a configured confederation eBGP peer to trigger a denial of service. Version 4.7.0 patches the issue.
CVE-2026-49838
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP UPDATE validator: a malformed UPDATE that should be rejected as a malformed AS_PATH instead reaches an unchecked `p.Value[0]` access, allowing a configured confederation eBGP peer to trigger a denial of service. Version 4.7.0 patches the issue.
CVE-2026-49838
GoBGP is an open source Border Gateway Protocol (BGP) implementation i ...
ROS-20260819-80-0006
Уязвимость gobgp
ROS-20260819-73-0006
Уязвимость gobgp
GHSA-frrj-87jh-2772
GoBGP confederation validation panics on empty AS_PATH attribute
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-14523 Уязвимость обработчиков декодирования парсера BGP OPEN-сообщений модуля pkg/packet/bgp протокола пограничного шлюза GoBGP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | CVE-2026-49838 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP UPDATE validator: a malformed UPDATE that should be rejected as a malformed AS_PATH instead reaches an unchecked `p.Value[0]` access, allowing a configured confederation eBGP peer to trigger a denial of service. Version 4.7.0 patches the issue. | CVSS3: 5.9 | 0% Низкий | 7 дней назад |
 | CVE-2026-49838 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP UPDATE validator: a malformed UPDATE that should be rejected as a malformed AS_PATH instead reaches an unchecked `p.Value[0]` access, allowing a configured confederation eBGP peer to trigger a denial of service. Version 4.7.0 patches the issue. | CVSS3: 5.9 | 0% Низкий | 7 дней назад |
 | CVE-2026-49838 GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP UPDATE validator: a malformed UPDATE that should be rejected as a malformed AS_PATH instead reaches an unchecked `p.Value[0]` access, allowing a configured confederation eBGP peer to trigger a denial of service. Version 4.7.0 patches the issue. | CVSS3: 5.9 | 0% Низкий | 7 дней назад |
| CVE-2026-49838 GoBGP is an open source Border Gateway Protocol (BGP) implementation i ... | CVSS3: 5.9 | 0% Низкий | 7 дней назад |
 | ROS-20260819-80-0006 Уязвимость gobgp | CVSS2: 7.1 | 0% Низкий | 30 дней назад |
| ROS-20260819-73-0006 Уязвимость gobgp | CVSS2: 7.1 | 0% Низкий | 30 дней назад |
| GHSA-frrj-87jh-2772 GoBGP confederation validation panics on empty AS_PATH attribute | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу