osrg GoBGP Integer Underflow Vulnerability in MRT RIB Entry Parsing

An integer underflow vulnerability has been identified in osrg GoBGP versions prior to 4.4.0. The issue arises in the parseRibEntry function within the MRT packet handling code. This vulnerability can be exploited remotely, leading to potential manipulation of BGP route information.

Impact

Exploitation of this vulnerability allows for integer underflow, which can be manipulated to cause unexpected behavior in the application, potentially leading to memory corruption or other forms of exploitation.

Remediation

Users are advised to upgrade to osrg GoBGP version 4.4.0 or later, where this vulnerability has been addressed.