GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2026-37462 · ADVISORY
• osrg/gobgp commit 9ce8936 · WEB
• osrg/gobgp · PACKAGE
• osrg/gobgp · WEB
• GitHub Advisory GHSA-pw7p-7fqv-hpj8 · ADVISORY

github.com/osrg/gobgp/v4 のその他の脆弱性

• CVE-2026-49838中 5.9GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a…
• CVE-2026-49837中 5.9GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP O…
• CVE-2026-42285高 7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated re…
• CVE-2026-41643高 7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial…
• CVE-2026-41642高 7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Se…