PT-2026-29060
CVE-2026-5124
·
Publicado
2026-01-01
·
Atualizado
2026-08-24
Descrição por
CVSS 4.0
6.3
MédiaMétricasAV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X
Name of the Vulnerable Software and Affected Versions
osrg GoBGP versions through 4.3.0
Description
A security issue has been identified in osrg GoBGP. The
BGPHeader.DecodeFromBytes function within the BGP Header Handler component, located in the file pkg/packet/bgp/bgp.go, is susceptible to improper access controls. Remote exploitation is possible, and the attack is considered to have high complexity with difficult exploitability.Recommendations
Deploy the patch with identifier f0f24a2a901cbf159260698211ab15c583ced131.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾