A vulnerability has been found in osrg GoBGP up to 4.3.0.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 4, 2026 · NIST NVD

   Detected

   A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. Such manipulation of the argument data leads to denial of service. The attack may be performed from remote. Upgrading to version 4.4.0 will fix this issue. The name of the patch is f9f7b55ec258e514be026

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. Such manipulation of the argument data leads to denial of service. The attack may be performed from remote. Upgrading to version 4.4.0 will fix this issue. The name of the patch is f9f7b55ec258e514be026

Affected

• cpe osrg/gobgpversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-7734

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-7734

  A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. Such manipulation of the argument data leads to denial of service. The attack may

  nvd.nist.gov

References

• Product · github.com
• Patch · github.com
• Patch · github.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com
• Permissions Required · vuldb.com