OS
Vendor
osrg
20
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-49838 | GO gobgp osrg | 5.9 | Sep 10 | GoBGP confederation validation panics on empty AS_PATH attribute |
| CVE-2026-49837 | GO gobgp osrg | 5.9 | Sep 10 | GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries |
| CVE-2026-41643 | GO gobgp osrg | 7.5 | May 7 | GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE |
| CVE-2026-42285 | GO gobgp osrg | 7.5 | May 7 | GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) |
| CVE-2026-41642 | GO gobgp osrg | 7.5 | May 7 | GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute |
| CVE-2026-7737 | GO GoBGP osrg | 7.5 | May 4 | osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds |
| CVE-2026-7736 | GO GoBGP osrg | 7.5 | May 4 | osrg GoBGP mrt.go parseRibEntry integer underflow |
| CVE-2026-7735 | GO GoBGP osrg | 7.3 | May 4 | osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow |
| CVE-2026-7734 | GO GoBGP osrg | 7.5 | May 4 | osrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of service |
| CVE-2026-37461 | GO Gobgp Osrg | 7.5 | May 4 | An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message |
| CVE-2026-5124 | GO GoBGP osrg | 3.7 | Mar 30 | osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access control |
| CVE-2026-5123 | GO GoBGP osrg | 3.7 | Mar 30 | osrg GoBGP bgp.go DecodeFromBytes off-by-one |
| CVE-2026-5122 | GO GoBGP osrg | 3.7 | Mar 30 | osrg GoBGP BGP OPEN Message bgp.go DecodeFromBytes access control |
| CVE-2026-30405 | GO Gobgp Osrg | 7.5 | Mar 16 | An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute |
| CVE-2025-7464 | GO GoBGP osrg | 3.7 | Jul 12 | osrg GoBGP rtr.go SplitRTR out-of-bounds |
| CVE-2025-43973 | GO Gobgp Osrg | 9.8 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 |
| CVE-2025-43972 | GO Gobgp Osrg | 7.5 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 |
| CVE-2025-43971 | GO Gobgp Osrg | 7.5 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 |
| CVE-2025-43970 | GO Gobgp Osrg | 5.3 | Apr 21 | An issue was discovered in GoBGP before 3.35.0 |
| CVE-2023-46565 | GO Gobgp Osrg | 7.5 | Apr 29 | Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in… |
