CVE-2026-49837: falha de média gravidade em osrg gobgp
GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.3%
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded by the declared capability length, `CapLen`. A malformed BGP OPEN message can cause bytes from a following capability to be interpreted as part of the current capability. The most security-relevant case is the 4-octet AS capability, where a capability with `CapLen == 0` may cause the parser to read bytes from the following capability as the 4-octet AS value. This parsed value may later affect peer AS validation during BGP session establishment. Version 4.6.0 patches the issue.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
osrg · gobgpCVEs relacionadas — osrg gobgp
No mesmo produto, das mais perigosas para as menos.
CVE-2026-41643HIGHGoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATEEPSS 0.5%CVE-2026-41642HIGHGoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path AttributeEPSS 0.5%CVE-2026-42285HIGHGoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)EPSS 0.4%CVE-2026-49838MEDIUMGoBGP confederation validation panics on empty AS_PATH attributeEPSS 0.4%