PT-2024-13361

CVE-2023-46565

Published

2024-04-29

Updated

2026-09-02

Description by

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions osrg gobgp version 419c50dfac578daa4d11256904d0dc182f1a9b22

Description The issue allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go. This is a Buffer Overflow vulnerability.

Recommendations For osrg gobgp version 419c50dfac578daa4d11256904d0dc182f1a9b22, consider disabling the handlingError function in pkg/server/fsm.go as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Vendors