An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 03 Jun 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Osrg
Osrg gobgp |
|
| Vendors & Products |
Osrg
Osrg gobgp |
Wed, 03 Jun 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-06-03T14:16:12.985Z
Reserved: 2026-04-06T00:00:00.000Z
Link: CVE-2026-37462
No data.
Status : Received
Published: 2026-06-03T16:16:29.120
Modified: 2026-06-03T16:16:29.120
Link: CVE-2026-37462
No data.
OpenCVE Enrichment
Updated: 2026-06-03T17:30:35Z
Weaknesses
No weakness.