CVE-2026-7734

Katalog CVE

CVSS 7.5 · High EPSS 0,85%

Kerentanan Improper Resource Shutdown or Release pada osrg gobgp. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. Such manipulation of the argument data leads to denial of service. The attack may be performed from remote. Upgrading to version 4.4.0 will fix this issue. The name of the patch is f9f7b55ec258e514be0264871fa645a2c3edad11. You should upgrade the affected component.

Rincian

Terbit di NVD

4 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 57,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/osrg/gobgp/commit/f9f7b55ec258e514be0264871fa645a2c3edad11 patch
• https://github.com/osrg/gobgp/releases/tag/v4.4.0 patch · product
• https://vuldb.com/submit/807581 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/360909 advisory pihak ketiga · vdb entry
• https://github.com/osrg/gobgp/ product
• https://vuldb.com/vuln/360909/cti permissions required · vdb entry