CVE-2026-7736

High

Published: 04/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability was identified in osrg GoBGP up to version 4.3.0, concerning the parseRibEntry function in the pkg/packet/mrt/mrt.go file. Manipulating this function can lead to integer underflow, allowing for remote attacks.

Risk Assessment

This vulnerability can be exploited by a remote attacker, posing a significant security risk to the system.

Recommendation

It is recommended to upgrade to version 4.4.0, which addresses this vulnerability.

Other vulnerabilities in osrg GoBGP

CVE-2026-7735High
A vulnerability was found in osrg GoBGP up to version 4.3.0, affecting the function PathAttributeAigp.DecodeFromBytes in the file pkg/packet/bgp/bgp.go. Manipulating this function can lead to buffer overflow, allowing for remote attacks.

Original NVD description (English source)

A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer underflow. It is possible to launch the attack remotely. Upgrading to version 4.4.0 addresses this issue. This patch is called 76d911046344a3923cbe573364197aa081944592. It is suggested to upgrade the affected component.