CVE-2026-7736

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7736", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-05-03T16:16:30.716Z", "datePublished": "2026-05-04T05:30:16.444Z", "dateUpdated": "2026-05-04T10:37:55.302Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-04T05:30:16.444Z"}, "title": "osrg GoBGP mrt.go parseRibEntry integer underflow", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-191", "lang": "en", "description": "Integer Underflow"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-189", "lang": "en", "description": "Numeric Error"}]}], "affected": [{"vendor": "osrg", "product": "GoBGP", "versions": [{"version": "4.0", "status": "affected"}, {"version": "4.1", "status": "affected"}, {"version": "4.2", "status": "affected"}, {"version": "4.3.0", "status": "affected"}, {"version": "4.4.0", "status": "unaffected"}], "cpes": ["cpe:2.3:a:osrg:gobgp:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer underflow. It is possible to launch the attack remotely. Upgrading to version 4.4.0 addresses this issue. This patch is called 76d911046344a3923cbe573364197aa081944592. It is suggested to upgrade the affected component."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}], "timeline": [{"time": "2026-05-03T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-05-03T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-05-03T18:21:48.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Sunxj (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/360911", "name": "VDB-360911 | osrg GoBGP mrt.go parseRibEntry integer underflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/360911/cti", "name": "VDB-360911 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/807604", "name": "Submit #807604 | osrg GoBGP <= 4.3.0 Integer Underflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/osrg/gobgp/commit/76d911046344a3923cbe573364197aa081944592", "tags": ["patch"]}, {"url": "https://github.com/osrg/gobgp/releases/tag/v4.4.0", "tags": ["patch"]}, {"url": "https://github.com/osrg/gobgp/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-04T10:37:13.494602Z", "id": "CVE-2026-7736", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-04T10:37:55.302Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7736", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-04T10:37:13.494602Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-04T10:37:51.922Z"}}], "cna": {"tags": ["x_open-source"], "title": "osrg GoBGP mrt.go parseRibEntry integer underflow", "credits": [{"lang": "en", "type": "reporter", "value": "Sunxj (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:osrg:gobgp:*:*:*:*:*:*:*:*"], "vendor": "osrg", "product": "GoBGP", "versions": [{"status": "affected", "version": "4.0"}, {"status": "affected", "version": "4.1"}, {"status": "affected", "version": "4.2"}, {"status": "affected", "version": "4.3.0"}, {"status": "unaffected", "version": "4.4.0"}]}], "timeline": [{"lang": "en", "time": "2026-05-03T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-05-03T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-05-03T18:21:48.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/360911", "name": "VDB-360911 | osrg GoBGP mrt.go parseRibEntry integer underflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/360911/cti", "name": "VDB-360911 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/807604", "name": "Submit #807604 | osrg GoBGP <= 4.3.0 Integer Underflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/osrg/gobgp/commit/76d911046344a3923cbe573364197aa081944592", "tags": ["patch"]}, {"url": "https://github.com/osrg/gobgp/releases/tag/v4.4.0", "tags": ["patch"]}, {"url": "https://github.com/osrg/gobgp/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer underflow. It is possible to launch the attack remotely. Upgrading to version 4.4.0 addresses this issue. This patch is called 76d911046344a3923cbe573364197aa081944592. It is suggested to upgrade the affected component."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-191", "description": "Integer Underflow"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-189", "description": "Numeric Error"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-04T05:30:16.444Z"}}}, "cveMetadata": {"cveId": "CVE-2026-7736", "state": "PUBLISHED", "dateUpdated": "2026-05-04T10:37:55.302Z", "dateReserved": "2026-05-03T16:16:30.716Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-05-04T05:30:16.444Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:osrg:gobgp:*:*:*:*:*:*:*:*"], "product": "GoBGP", "vendor": "osrg", "versions": [{"status": "affected", "version": "4.0"}, {"status": "affected", "version": "4.1"}, {"status": "affected", "version": "4.2"}, {"status": "affected", "version": "4.3.0"}, {"status": "unaffected", "version": "4.4.0"}]}], "source": "cna@vuldb.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:osrg:gobgp:*:*:*:*:*:*:*:*", "matchCriteriaId": "05DBB6FD-F3CD-4BF0-A573-D1E87307A50F", "versionEndExcluding": "4.4.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer underflow. It is possible to launch the attack remotely. Upgrading to version 4.4.0 addresses this issue. This patch is called 76d911046344a3923cbe573364197aa081944592. It is suggested to upgrade the affected component."}, {"lang": "es", "value": "Se determin\u00f3 una vulnerabilidad en osrg GoBGP hasta la versi\u00f3n 4.3.0. Afectada por esta vulnerabilidad es la funci\u00f3n parseRibEntry del archivo pkg/packet/mrt/mrt.go. La ejecuci\u00f3n de una manipulaci\u00f3n puede conducir a un desbordamiento negativo de enteros. Es posible lanzar el ataque de forma remota. La actualizaci\u00f3n a la versi\u00f3n 4.4.0 soluciona este problema. Este parche se denomina 76d911046344a3923cbe573364197aa081944592. Se sugiere actualizar el componente afectado."}], "id": "CVE-2026-7736", "lastModified": "2026-10-26T19:10:00.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7736", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-04T10:37:13.494602Z", "version": "2.0.3"}}]}, "published": "2026-05-04T07:16:01.517", "references": [{"source": "cna@vuldb.com", "tags": ["Product"], "url": "https://github.com/osrg/gobgp/"}, {"source": "cna@vuldb.com", "tags": ["Patch"], "url": "https://github.com/osrg/gobgp/commit/76d911046344a3923cbe573364197aa081944592"}, {"source": "cna@vuldb.com", "tags": ["Patch", "Product"], "url": "https://github.com/osrg/gobgp/releases/tag/v4.4.0"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/submit/807604"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/vuln/360911"}, {"source": "cna@vuldb.com", "tags": ["Permissions Required", "VDB Entry"], "url": "https://vuldb.com/vuln/360911/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}, {"lang": "en", "value": "CWE-191"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/osrg/gobgp: osrg GoBGP: Integer underflow via manipulation in parseRibEntry function", "id": "2464871", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464871"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-191", "details": ["A flaw was found in osrg GoBGP. A remote attacker can exploit this vulnerability by executing a manipulation that leads to an integer underflow in the `parseRibEntry` function. This integer underflow can result in low impacts to the system's confidentiality, integrity, and availability."], "mitigation": {"lang": "en:us", "value": "To mitigate this issue, restrict network access to systems running GoBGP to only trusted BGP peers. Configure firewall rules to limit inbound connections to the BGP port (TCP 179) from known and authorized sources. This will reduce the attack surface by preventing arbitrary remote attackers from sending malicious BGP messages. Any changes to firewall rules or network configurations may require a service reload or restart to take effect, which could temporarily disrupt network services."}, "name": "CVE-2026-7736", "public_date": "2026-05-04T05:30:16Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-7736\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-7736\nhttps://github.com/osrg/gobgp/\nhttps://github.com/osrg/gobgp/commit/76d911046344a3923cbe573364197aa081944592\nhttps://github.com/osrg/gobgp/releases/tag/v4.4.0\nhttps://vuldb.com/submit/807604\nhttps://vuldb.com/vuln/360911\nhttps://vuldb.com/vuln/360911/cti"], "statement": "This flaw is rated as Important. A remote unauthenticated attacker whose is able to reach the application consuming the GoBGP library to handle `MRT` information can trigger the integer underflow vulnerability by sending a maliciously crafted packet to the application. The value resulted from the underflow is further used to try to read information from the memory buffer holding the packet itself resulting in a out-of-bounds read. As the Go language is considered memory safe, in this implementation the attacker won't be able to read any unintended data as the Go runtime will case the application to panic meaning there's no integrity or confidentiality impact as consequence of a successful attacker. However when this flaw is exploited, due to the same runtime protection leading the application to panic, a denial-of-service (DoS) is achieved for all users trying to access the application, result in a high impact to the availability aspect.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.3.0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "4.4.0"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "GoBGP", "source": "cna", "vendor": "osrg"}, "product": "gobgp", "vendor": "osrg"}], "created": "2026-05-04T07:30:40.197439+00:00", "updated": "2026-05-04T07:45:05.963959+00:00", "vendors": ["osrg", "osrg$PRODUCT$gobgp"]}