CVE-2026-7735
osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
- Record
CVE-2026-7735- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C - CVSS 2.0
- 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C - Weakness
- CWE-120, CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2026-26915
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
- Record
EUVD-2026-26915- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5jvq-55xj-6qff
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp...
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
- Record
GHSA-5jvq-55xj-6qff- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
- Record
CVE-2026-7735- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119, CWE-120
- Updated
- 2026-11-02
OSV
osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
- Record
CVE-2026-7735- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X - Weakness
- CWE-119, CWE-120
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-7735
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
- Record
DEBIAN-CVE-2026-7735- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-7735
A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a manipulation results in buffer overflow. It is possible to initiate the attack remotely. Upgrading to version 4.4.0 is able to address this issue. The patch is named 51ad1ada06cb41ce47b7066799981816f50b7ced. The affected component should be upgraded.
- Record
UBUNTU-CVE-2026-7735- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUSN-8348-1 No score
gobgp vulnerabilities
It was discovered that GoBGP incorrectly handled certain specially crafted BGP UPDATE messages. A remote attacker could possibly use this issue to cause GoBGP to crash, resulting in a denial of service. (CVE-2026-37461)
Yanlei Wang discovered that GoBGP incorrectly handled certain malformed BGP UPDATE messages containing 4-byte AS attributes. A remote attacker could possibly use this issue to cause GoBGP to crash, resulting in a denial of service. (CVE-2026-41643)
It was discovered that GoBGP incorrectly handled certain malformed BGP UPDATE messages containing SRv6 L3 Service attributes. A remote attacker could possibly use this issue to cause GoBGP to crash, resulting in a denial of service. (CVE-2026-7734)
It was discovered that GoBGP incorrectly handled certain malformed BGP UPDATE messages containing Accumulated IGP (AIGP) attributes. A remote attacker could possibly use this issue to cause GoBGP to crash, resulting in a denial of service. (CVE-2026-7735)
It was discovered that GoBGP incorrectly handled certain malformed Multi- threaded Routing Toolkit (MRT) routing information entries. A remote attacker could possibly use this issue to cause GoBGP to crash, resulting in a denial of service. (CVE-2026-7736)
It was discovered that GoBGP incorrectly handled certain malformed Multi- threaded Routing Toolkit (MRT) headers. A remote attacker could possibly use this issue to cause GoBGP to crash, resulting in a denial of service. (CVE-2026-7737)
- Record
USN-8348-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gobgpDebian:12 |
All versions, plus listed versions 3.10.0-13.16.0-13.19.0-13.21.0-13.23.0-1 Show 23 moreShow less3.25.0-13.27.0-13.28.0-13.29.0-13.30.0-13.31.0-13.32.0-13.33.0-13.35.0-13.36.0-13.36.0-24.3.0-14.4.0-14.5.0-14.5.0-1~bpo13+14.6.0-14.6.0-24.6.0-2~bpo13+14.7.0-14.7.0-1~bpo13+14.8.0-14.8.0-1~bpo13+14.8.0-2~exp1 |
None known |
gobgpDebian:13 |
All versions, plus listed versions 3.36.0-24.3.0-14.4.0-14.5.0-14.5.0-1~bpo13+1 Show 8 moreShow less4.6.0-14.6.0-24.6.0-2~bpo13+14.7.0-14.7.0-1~bpo13+14.8.0-14.8.0-1~bpo13+14.8.0-2~exp1 |
None known |
gobgpDebian:14 |
before 4.4.0-1, plus listed versions 3.36.0-24.3.0-1 |
4.4.0-1 |
gobgpUbuntu:Pro:18.04:LTS |
before 1.29-1ubuntu0.1+esm2, plus listed versions 1.15-11.29-11.29-1ubuntu0.1+esm1 |
1.29-1ubuntu0.1+esm2 |
gobgpUbuntu:Pro:20.04:LTS |
before 2.12.0-1ubuntu0.1~esm3, plus listed versions 1.33-12.11.0-12.12.0-12.12.0-1ubuntu0.1~esm12.12.0-1ubuntu0.1~esm2 |
2.12.0-1ubuntu0.1~esm3 |
gobgpUbuntu:Pro:22.04:LTS |
before 2.25.0-3ubuntu0.1+esm4, plus listed versions 2.25.0-22.25.0-32.25.0-3build12.25.0-3ubuntu0.12.25.0-3ubuntu0.1+esm12.25.0-3ubuntu0.1+esm22.25.0-3ubuntu0.1+esm3 |
2.25.0-3ubuntu0.1+esm4 |
gobgpUbuntu:Pro:24.04:LTS |
before 3.23.0-1ubuntu0.3+esm4, plus listed versions 3.16.0-1build13.19.0-13.21.0-13.23.0-13.23.0-1ubuntu0.1 Show 6 moreShow less3.23.0-1ubuntu0.23.23.0-1ubuntu0.2+esm13.23.0-1ubuntu0.33.23.0-1ubuntu0.3+esm13.23.0-1ubuntu0.3+esm23.23.0-1ubuntu0.3+esm3 |
3.23.0-1ubuntu0.3+esm4 |
gobgpUbuntu:25.10 |
All versions, plus listed versions 3.35.0-13.36.0-2 |
None known |
gobgpUbuntu:Pro:26.04:LTS |
before 3.36.0-2ubuntu0.1~esm1, plus listed versions 3.36.0-23.36.0-2build1 |
3.36.0-2ubuntu0.1~esm1 |
gobgpUbuntu:Pro:18.04:LTS From an advisory covering 6 CVEs |
before 1.29-1ubuntu0.1+esm2, plus listed versions 1.15-11.29-11.29-1ubuntu0.1+esm1 |
1.29-1ubuntu0.1+esm2 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gobgpUbuntu:Pro:20.04:LTS From an advisory covering 6 CVEs |
before 2.12.0-1ubuntu0.1~esm3, plus listed versions 1.33-12.11.0-12.12.0-12.12.0-1ubuntu0.1~esm12.12.0-1ubuntu0.1~esm2 |
2.12.0-1ubuntu0.1~esm3 |
gobgpUbuntu:Pro:22.04:LTS From an advisory covering 6 CVEs |
before 2.25.0-3ubuntu0.1+esm4, plus listed versions 2.25.0-22.25.0-32.25.0-3build12.25.0-3ubuntu0.12.25.0-3ubuntu0.1+esm12.25.0-3ubuntu0.1+esm22.25.0-3ubuntu0.1+esm3 |
2.25.0-3ubuntu0.1+esm4 |
gobgpUbuntu:Pro:24.04:LTS From an advisory covering 6 CVEs |
before 3.23.0-1ubuntu0.3+esm4, plus listed versions 3.16.0-1build13.19.0-13.21.0-13.23.0-13.23.0-1ubuntu0.1 Show 6 moreShow less3.23.0-1ubuntu0.23.23.0-1ubuntu0.2+esm13.23.0-1ubuntu0.33.23.0-1ubuntu0.3+esm13.23.0-1ubuntu0.3+esm23.23.0-1ubuntu0.3+esm3 |
3.23.0-1ubuntu0.3+esm4 |
gobgpUbuntu:Pro:26.04:LTS From an advisory covering 6 CVEs |
before 3.36.0-2ubuntu0.1~esm1, plus listed versions 3.36.0-23.36.0-2build1 |
3.36.0-2ubuntu0.1~esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-7735 is a medium vulnerability (CVSS 6.9) in Osrg Gobgp, published May 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in gobgp 4.4.0-1.
References
vuldb.com/vuln/360910
github.com/osrg/gobgp/commit/51ad1ada06cb41ce47b7066799981816f50b7ced
Show 12 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-7735
security-tracker.debian.org/tracker/CVE-2026-7735
ubuntu.com/security/CVE-2026-7735
cve.org/CVERecord?id=CVE-2026-7735