A Denial of Service (DoS) vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an malicious user to craft a specific BGP message to cause the routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. This issue only affects PE routers configured with BGP Auto discovery for LDP VPLS. Other BGP configurations are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions before 12.1X46-D81; 12.3 versions before 12.3R12-S12; 12.3X48 versions before 12.3X48-D76; 14.1X53 versions before 14.1X53-D48; 15.1 versions before 15.1F6-S12, 15.1R7-S2; 15.1X49 versions before 15.1X49-D150; 15.1X53 versions before 15.1X53-D235, 15.1X53-D495, 15.1X53-D590, 15.1X53-D68; 16.1 versions before 16.1R3-S10, 16.1R4-S12, 16.1R6-S6, 16.1R7-S1; 16.2 versions before 16.2R2-S7; 17.1 versions before 17.1R2-S9, 17.1R3; 17.2 versions before 17.2R1-S7, 17.2R2-S6, 17.2R3; 17.3 versions before 17.3R2-S4, 17.3R3; 17.4 versions before 17.4R1-S5, 17.4R2; 18.1 versions before 18.1R2-S3, 18.1R3.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
juniper junos 12.1x46 |
||
juniper junos 12.3 |
||
juniper junos 12.3x48 |
||
juniper junos 14.1x53 |
||
juniper junos 15.1 |
||
juniper junos 15.1x49 |
||
juniper junos 15.1x53 |
||
juniper junos 16.1 |
||
juniper junos 16.2 |
||
juniper junos 17.1 |
||
juniper junos 17.2 |
||
juniper junos 17.3 |
||
juniper junos 17.4 |
||
juniper junos 18.1 |
Happy New Year from the Gin Palace
Juniper Networks has had its first big bug day in months, with 19 patches announced covering everything from third-party package catchups to critical errors in password handling. For the sake of organisation, let's pick up patches in the Junos OS first (there being so many patches, The Register will focus on those rated "High" and "Critical"). First on the critical list is CVE-2019-0006, which affects Junos OS 14.1X53, 15.1, and 15.1X53 running on EX, QFX and MX units. A crafted HTTP packet can ...