CVE-2026-5123

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data[1] can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. This patch is called 67c059413470df64bc20801c46f64058e88f800f. A patch should be applied to remediate this issue.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-189 CWE-193

Affected software

Vendor	Product	Versions
osrg	GoBGP	4.0; 4.1; 4.2; 4.3.0

References

https://github.com/osrg/gobgp/Product
https://github.com/osrg/gobgp/commit/67c059413470df64bc20801c46f64058e88f800fPatch
https://github.com/osrg/gobgp/pull/3342Issue Tracking
https://vuldb.com/submit/780179Third Party Advisory, VDB Entry
https://vuldb.com/vuln/354155Third Party Advisory, VDB Entry
https://vuldb.com/vuln/354155/ctiPermissions Required, VDB Entry

Timeline

Published: Mar 30, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-51243.7A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/pac CVE-2026-51255.3A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of CVE-2026-51266.3A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file_get_contents. This manipulation cau CVE-2026-51278.8The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable t CVE-2026-51308.8The Debugger & Troubleshooter plugin for WordPress was vulnerable to Unauthenticated Privilege Escalation in versions up to and including 1.CVE-2026-51316.9GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these CVE-2026-51326.5Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit size of unpacked SDP messages co CVE-2026-51349.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Software Informatics Technology L CVE-2026-513469.1SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obta CVE-2026-51356.5A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an CVE-2026-51368.8A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissio CVE-2026-513669.9SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo