Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet

Summary

An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet. Continued receipt of this packet will cause a sustained Denial of Service condition. This issue affects: • Juniper Networks Junos OS: • All versions prior to 20.4R3-S6; • 21.1 versions prior to 21.1R3-S5; • 21.2 versions prior to 21.2R3-S4; • 21.3 versions prior to 21.3R3-S3; • 21.4 versions prior to 21.4R3-S3; • 22.1 versions prior to 22.1R2-S2, 22.1R3; • 22.2 versions prior to 22.2R2-S1, 22.2R3; • 22.3 versions prior to 22.3R1-S2, 22.3R2. Juniper Networks Junos OS Evolved: • All versions prior to 20.4R3-S6-EVO; • 21.1-EVO version 21.1R1-EVO and later versions prior to 21.2R3-S4-EVO; • 21.3-EVO versions prior to 21.3R3-S3-EVO; • 21.4-EVO versions prior to 21.4R3-S3-EVO; • 22.1-EVO versions prior to 22.1R3-EVO; • 22.2-EVO versions prior to 22.2R2-S1-EVO, 22.2R3-EVO; • 22.3-EVO versions prior to 22.3R1-S2-EVO, 22.3R2-EVO.

Timeline

1. Oct 12, 2023, 11:02 PM UTCCVE published
2. Sep 19, 2024, 1:09 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Sep 19, 2024, 1:09 PM UTCRecord last updated

Affected versions

• Juniper Networks Junos OS

  fixed in 20.4R3-S6; From 21.1 · fixed in 21.1R3-S5; From 21.2 · fixed in 21.2R3-S4; From 21.3 · fixed in 21.3R3-S3; From 21.4 · fixed in 21.4R3-S3

• Juniper Networks Junos OS Evolved

  fixed in 20.4R3-S6-EVO; From 21.1R1-EVO; From 21.2-EVO · fixed in 21.2R3-S4-EVO; From 21.3-EVO · fixed in 21.3R3-S3-EVO; From 21.4-EVO · fixed in 21.4R3-S3-EVO; From 22.1-EVO · fixed in 22.1R3-EVO

References 1