Rensiru

**Name of the Vulnerable Software and Affected Versions** osrg GoBGP versions prior to 4.4.0 **Description** A remote denial of service can occur in the SRv6 L3 Service component. The issue exists within the `SRv6L3ServiceAttribute.DecodeFromBytes()` function located in the `pkg/packet/bgp/prefix sid.go` file, where manipulation of the argument data triggers the failure. **Recommendations** Update to version 4.4.0.

**Name of the Vulnerable Software and Affected Versions** osrg GoBGP versions prior to 4.4.0 **Description** A buffer overflow can be triggered remotely within the AIGP Attribute Parser component. The issue exists in the `PathAttributeAigp.DecodeFromBytes()` function located in the `pkg/packet/bgp/bgp.go` file. **Recommendations** Upgrade to version 4.4.0.

**Name of the Vulnerable Software and Affected Versions** FRRouting FRR versions up to 10.5.1 **Description** A security issue exists in FRRouting FRR related to improper access controls within the EVPN Type-2 Route Handler component. The issue is located in the `process type2 route` function of the `bgpd/bgp evpn.c` file. The attack can be initiated remotely and is considered difficult to exploit. **Recommendations** Deploy a patch to address this issue.

**Name of the Vulnerable Software and Affected Versions** osrg GoBGP versions through 4.3.0 **Description** A security issue exists in osrg GoBGP up to version 4.3.0. The issue resides in the `DecodeFromBytes` function within the `pkg/packet/bgp/bgp.go` file, specifically in the BGP OPEN Message Handler component. Manipulation of the `domainNameLen` argument can lead to improper access controls. The attack can be initiated remotely and requires a high degree of complexity, with exploitability reported as difficult. **Recommendations** Install the patch 2b09db390a3d455808363c53e409afe6b1b86d2d to address this issue.