https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T14:20:19.698363+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-5123 CVE-2026-5123 — osrg GoBGP bgp.go DecodeFromBytes off-by-one 2026-09-29T14:20:20.466810+00:00

Affected: osrg GoBGP

A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data[1] can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. This patch is called 67c059413470df64bc20801c46f64058e88f800f. A patch should be applied to remediate this issue.

 https://vulnerability.circl.lu/vuln/ghsa-m763-9mqf-95rq GHSA-m763-9mqf-95rq 2026-09-29T14:20:20.466939+00:00

A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data[1] can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. This patch is called 67c059413470df64bc20801c46f64058e88f800f. A patch should be applied to remediate this issue.