Executive brief
GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE in github.com/osrg/gobgp
Affected products
- Go github.com/osrg/gobgp/v4
Junglewise Threat Intelligence
CVE-2026-41643: GO-2026-5266 - GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE in github.com/osrg/gobgp
CVE-2026-41643 · Severity: low · CVSS 3.1 · Published 2026-07-24
Technologies: github.com/osrg/gobgp/v4 (Go). Vendors: Go.
Related threats
- GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a
- GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP O
- GO-2026-5198 - GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute in github.com/osrg/gobgp
- GO-2026-5427 - GoBGP has an Integer Underflow Issue in github.com/osrg/gobgp
- GO-2026-5665 - GoBGP has an Improper Resource Shutdown or Release in github.com/osrg/gobgp