Skip to content
OpenAdvisories
High NCSC-2024-0404 3 CVEs

Kwetsbaarheden verholpen in Juniper JunOS en JunOS Evolved

Published Oct 10, 2024 · Updated Oct 10, 2024 · nl

Vendor: Juniper Networks Product: Junos OS Product: Junos OS Evolved

Summary

Juniper heeft kwetsbaarheden verholpen in JunOS en JunOS Evolved.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken door het verzenden van misvormd BGP verkeer.

Oplossingen
Juniper heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 3

  • High 7.5
    CVE-2024-39515

    Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash

    An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd t…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • High 7.5
    CVE-2024-39516

    Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

    An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to crash and restart, resultin…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • High 7.5
    CVE-2024-39525

    Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash

    An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specific BGP packet to cause rpd to crash and restar…

    Juniper Networks Junos OS Junos OS Evolved Network devices

Revision history

  1. #0

    Initiele versie

References