PT-2026-36763 · Osrg+3 · Gobgp+3
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
osrg GoBGP versions prior to 4.4.0
Description
A remote denial of service can occur in the SRv6 L3 Service component. The issue exists within the
SRv6L3ServiceAttribute.DecodeFromBytes() function located in the pkg/packet/bgp/prefix sid.go file, where manipulation of the argument data triggers the failure.Recommendations
Update to version 4.4.0.
Exploit
Fix
DoS
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gobgp
Linuxmint
Red Os
Ubuntu