CVE-2026-7734 | osrg GoBGP up to 4.3.0 SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes data denial of service

A vulnerability, which was classified as problematic, was found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. Such manipulation of the argument data leads to denial of service.

This vulnerability is listed as CVE-2026-7734. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.