Threats tagged 'ghsa-4p9m-8gc4-rw2h'

CVE-2026-30405 is a high-severity vulnerability in GoBGP gobgpd version 4.2.0 that allows a remote attacker to cause a denial of service (DoS) by exploiting the NEXT_HOP path attribute. The vulnerability requires no authentication or user interaction and can be triggered remotely over the network. It impacts availability by crashing or disrupting the BGP daemon, potentially affecting network routing stability. No known exploits are currently in the wild, and no patches have been published yet. Organizations relying on GoBGP for BGP routing should prioritize monitoring and mitigation to prevent service disruption. The vulnerability is classified under CWE-400, indicating a resource exhaustion or DoS condition. Countries with significant internet infrastructure and use of GoBGP are at higher risk. Immediate mitigation involves network-level filtering and limiting exposure of BGP sessions to untrusted sources.