← voltar
CVE-2026-5123

osrg GoBGP bgp.go DecodeFromBytes off-by-one

CVSS 6.3 MEDIUMEPSS 0.4%CWE-189CWE-193
A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data[1] can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. This patch is called 67c059413470df64bc20801c46f64058e88f800f. A patch should be applied to remediate this issue.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
osrg · GoBGP

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →