These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A denial-of-service vulnerability exists in GoBGP, an open-source Border Gateway Protocol (BGP) implementation in the Go Programming Language. The issue arises from the acceptance of a zero-length AS_PATH during UPDATE decoding, which later causes a panic when validating the attribute for a confederation eBGP peer. This vulnerability is patched in version 4.7.0.
A BGP OPEN capability parsing issue in GoBGP versions prior to 4.6.0 can cause a malformed BGP OPEN message to be misinterpreted, potentially affecting peer AS validation during BGP session establishment. The issue was patched in version 4.6.0. This vulnerability impacts network security, as it allows attackers to manipulate BGP sessions, potentially leading to unauthorized access or disruption of network [truncated]