Low severity3.7NVD Advisory· Published Mar 30, 2026· Updated Apr 6, 2026
CVE-2026-5123
CVE-2026-5123
Description
A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data[1] can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. This patch is called 67c059413470df64bc20801c46f64058e88f800f. A patch should be applied to remediate this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5- github.com/osrg/gobgp/commit/67c059413470df64bc20801c46f64058e88f800fnvdPatch
- vuldb.com/submit/780179nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/354155nvdThird Party AdvisoryVDB Entry
- github.com/osrg/gobgp/pull/3342nvdIssue Tracking
- vuldb.com/vuln/354155/ctinvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.