A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Execut…

Published:

3 mei 2026 om 22:00:00

Alert date:

4 mei 2026 om 08:00:49

Source:

nvd.nist.gov

Network Infrastructure

A remote integer underflow vulnerability (CVE-2026-7736) was discovered in osrg GoBGP versions up to 4.3.0. The vulnerability affects the parseRibEntry function in pkg/packet/mrt/mrt.go file. Attackers can exploit this remotely through manipulation techniques. The issue has been patched in version 4.4.0 with commit 76d911046344a3923cbe573364197aa081944592. Users are strongly advised to upgrade to the patched version to mitigate this security risk.

Technical details

Mitigation steps:

Affected products:

osrg GoBGP