#gobgp
LightNews LightNews
hugovalters.bsky.social
GoBGP as a BGP route reflector: set cluster ID in [global.route-reflector.config], mark peers with route-reflector-client = true. Scales iBGP beyond full-mesh.
https://www.valtersit.com/vault/configure-gobgp-route-reflector-with-cluster-id-and-client-g-75ea23/
#route-reflector #ibgp #ValtersIT
Configure GoBGP Route Reflector with Cluster ID and Client Groups
www.valtersit.com
September 29, 2026 at 9:30 AM
nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] gobgp,gobgpd: 4.5.0 -> 4.9.0

https://github.com/NixOS/nixpkgs/pull/562996

https://tracker.security.nixos.org/issues/NIXPKGS-2026-2558

#security
September 15, 2026 at 7:38 AM
netops2devops.net
Awesome! Looking forward to tinkering with it. Out of curiosity- how is it different than GoBGP?
September 10, 2026 at 8:15 PM
euvd-bot.bsky.social
🚨 EUVD-2026-34101
📊 n/a

📝 An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafte...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34101

#cybersecurity #infosec #cve #euvd
June 3, 2026 at 5:01 PM
cve.skyfleet.blue
CVE-2026-37462 - gobgp: BGPUpdate.DecodeFromBytes Integer Underflow Denial of Service
CVE ID : CVE-2026-37462

Published : June 3, 2026, 4:16 p.m. | 16 minutes ago

Description : An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 a...
CVE-2026-37462 - gobgp: BGPUpdate.DecodeFromBytes Integer Underflow Denial of Service
An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
cvefeed.io
June 3, 2026 at 4:51 PM
ubuntu.activitypub.awakari.com.ap.brid.gy


Origin | Interest | Match
USN-8348-1: GoBGP vulnerabilities | Ubuntu security notices | Ubuntu
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
ubuntu.com
June 3, 2026 at 9:23 AM
kazukichi.bsky.social
社内で独自に作ってるらしい経路注入用のBGPデーモンがあるようだが、個人的にはGoBGPとかに置き換えたいんだけど、なんかだいぶ実装が古そうなのを当人は改良したいらしくて面倒...
May 19, 2026 at 5:05 PM
thehackerwire.bsky.social
🟠 CVE-2026-41643 - High (7.5)

GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Langua...

https://www.thehackerwire.com/vulnerability/CVE-2026-41643/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-41643 - High
May 7, 2026 at 9:06 PM
thehackerwire.bsky.social
🟠 CVE-2026-41642 - High (7.5)

GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Langua...

https://www.thehackerwire.com/vulnerability/CVE-2026-41642/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-41642 - High
May 7, 2026 at 9:06 PM
thehackerwire.bsky.social
🟠 CVE-2026-42285 - High (7.5)

GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Langua...

https://www.thehackerwire.com/vulnerability/CVE-2026-42285/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-42285 - High
May 7, 2026 at 7:00 PM
cve.skyfleet.blue
CVE-2026-42285 - GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)
CVE ID : CVE-2026-42285

Published : May 7, 2026, 11:53 a.m. | 31 minutes ago

Description : GoBGP is an open source Border Gateway Protocol (BGP) implementation in th...
CVE-2026-42285 - GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending a specially crafted BGP UPDATE message. When the server receives a message with inconsistent attribute lengths, it improperly …
cvefeed.io
May 7, 2026 at 2:42 PM
cve.skyfleet.blue
CVE-2026-41642 - GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute
CVE ID : CVE-2026-41642

Published : May 7, 2026, 11:50 a.m. | 34 minutes ago

Description : GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Prog...
CVE-2026-41642 - GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP due to a nil pointer dereference. When a malformed BGP UPDATE message contains an unrecognized Path Attribute marked as "Well-known," the daemon …
cvefeed.io
May 7, 2026 at 2:13 PM
cve.skyfleet.blue
CVE-2026-41643 - GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE
CVE ID : CVE-2026-41643

Published : May 7, 2026, 11:53 a.m. | 31 minutes ago

Description : GoBGP is an open source Border Gateway Protocol (BGP) implementation in ...
CVE-2026-41643 - GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP where a malformed BGP UPDATE message can trigger a runtime error: index out of range panic. This occurs during the processing …
cvefeed.io
May 7, 2026 at 2:06 PM
thehackerwire.bsky.social
🟠 CVE-2026-37461 - High (7.5)

An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attac...

https://www.thehackerwire.com/vulnerability/CVE-2026-37461/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-37461 - High
May 5, 2026 at 8:59 PM
euvd-bot.bsky.social
🚨 EUVD-2026-26999
📊 n/a

📝 An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UP...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26999

#cybersecurity #infosec #cve #euvd
May 4, 2026 at 6:03 PM
cve.skyfleet.blue
CVE-2026-7736 - osrg GoBGP mrt.go parseRibEntry integer underflow
CVE ID : CVE-2026-7736

Published : May 4, 2026, 7:16 a.m. | 3 hours, 4 minutes ago

Description : A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function par...
CVE-2026-7736 - osrg GoBGP mrt.go parseRibEntry integer underflow
A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer underflow. It is possible to launch the attack remotely. Upgrading to version 4.4.0 addresses this issue. This patch is called 76d911046344a3923cbe573364197aa081944592. …
cvefeed.io
May 4, 2026 at 10:56 AM
cve.skyfleet.blue
CVE-2026-7737 - osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds
CVE ID : CVE-2026-7737

Published : May 4, 2026, 7:16 a.m. | 3 hours, 4 minutes ago

Description : A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is t...
CVE-2026-7737 - osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds
A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/packet/bmp/bmp.go of the component BMP Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. Upgrading to version 4.4.0 can resolve this issue. The identifier of …
cvefeed.io
May 4, 2026 at 10:49 AM
euvd-bot.bsky.social
🚨 EUVD-2026-26916
📊 6.9/10
🏢 osrg

📝 A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Exe...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26916

#cybersecurity #infosec #cve #euvd
May 4, 2026 at 7:19 AM
euvd-bot.bsky.social
🚨 EUVD-2026-26917
📊 6.9/10
🏢 osrg

📝 A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBod...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26917

#cybersecurity #infosec #cve #euvd
May 4, 2026 at 7:19 AM
euvd-bot.bsky.social
🚨 EUVD-2026-26914
📊 6.9/10
🏢 osrg

📝 A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26914

#cybersecurity #infosec #cve #euvd
May 4, 2026 at 7:16 AM
euvd-bot.bsky.social
🚨 EUVD-2026-26915
📊 6.9/10
🏢 osrg

📝 A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the comp...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26915

#cybersecurity #infosec #cve #euvd
May 4, 2026 at 7:16 AM
cve.skyfleet.blue
CVE-2026-7735 - osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow
CVE ID : CVE-2026-7735

Published : May 4, 2026, 5:15 a.m. | 1 hour, 5 minutes ago

Description : A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the functio...
CVE-2026-7735 - osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. …
cvefeed.io
May 4, 2026 at 6:51 AM
cve.skyfleet.blue
CVE-2026-7734 - osrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of service
CVE ID : CVE-2026-7734

Published : May 4, 2026, 5 a.m. | 1 hour, 20 minutes ago

Description : A vulnerability has been found in osrg GoBGP up to 4.3.0. This ...
CVE-2026-7734 - osrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of service
A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. Such manipulation of the argument data leads to denial of service. The attack may be performed from remote. Upgrading to version 4.4.0 will fix …
cvefeed.io
May 4, 2026 at 6:43 AM
euvd-bot.bsky.social
🚨 EUVD-2026-17139
📊 6.3/10
🏢 osrg

📝 A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-17139

#cybersecurity #infosec #cve #euvd
March 30, 2026 at 6:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-17109
📊 6.3/10
🏢 osrg

📝 A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulati...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-17109

#cybersecurity #infosec #cve #euvd
March 30, 2026 at 5:02 PM