https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 13:28:51 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-14525 bdu:2026-14525 https://vulnerability.circl.lu/vuln/bdu:2026-14525 https://vulnerability.circl.lu/vuln/cve-2026-42285 <p><strong>Affected:</strong> osrg gobgp</p> <p>GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending a specially crafted BGP UPDATE message. When the server receives a message with inconsistent attribute lengths, it improperly handles the internal state transition to a &#34;withdraw&#34; action, leading to a nil pointer dereference in the AdjRib.Update function. This causes the entire GoBGP process to crash, resulting in a complete loss of service availability. This issue has been patched in version 4.5.0.</p> <p><strong>Affected:</strong> osrg gobgp</p> <p>GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending a specially crafted BGP UPDATE message. When the server receives a message with inconsistent attribute lengths, it improperly handles the internal state transition to a &#34;withdraw&#34; action, leading to a nil pointer dereference in the AdjRib.Update function. This causes the entire GoBGP process to crash, resulting in a complete loss of service availability. This issue has been patched in version 4.5.0.</p> https://vulnerability.circl.lu/vuln/cve-2026-42285