{"id":"EUVD-2026-28351","revision":"8698e861f269472db1f28ca80aa4571c","records":[{"revision":"8698e861f269472db1f28ca80aa4571c","observedAt":"2026-10-28T05:10:29.441+00:00","statement":{"source":"euvd","id":"EUVD-2026-28351","aliases":["CVE-2026-41642","GHSA-7235-89m6-f4px"],"title":"GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP due to a nil pointer dereference. When a malformed BGP UPD…","description":"GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP due to a nil pointer dereference. When a malformed BGP UPDATE message contains an unrecognized Path Attribute marked as \"Well-known,\" the daemon fails to interrupt the message handling flow. This results in an illegal memory access and a full process crash (panic). This issue has been patched in version 4.4.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://github.com/osrg/gobgp/security/advisories/GHSA-7235-89m6-f4px","https://github.com/osrg/gobgp/releases/tag/v4.4.0"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28351","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 7, 2026, 11:50:41 AM","dateUpdated":"May 7, 2026, 12:34:38 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-28351","identifiers":["EUVD-2026-28351","CVE-2026-41642","GHSA-7235-89m6-f4px"]},"retained":false,"historicalAffected":[]}],"coverage":[]}