Skip to content
OpenAdvisories
High · 7.5 CVE-2019-0019 EUVD-2019-0826GHSA-mpq6-qrw3-g58q

BGP packets can trigger rpd crash when BGP tracing is enabled.

Published Apr 10, 2019 · Updated Sep 16, 2024 · Assigned by juniper

Description

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9, 16.2R3; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S1; 17.3 versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions prior to 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect Junos releases prior to 16.1R1.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS 16.1 – < 16.1R7-S4, 16.1R7-S5, 16.2 – < 16.2R2-S9, 16.2R3, 17.1 – < 17.1R3, 17.2 – < 17.2R3-S1, 17.3 – < 17.3R3-S3, 17.3R3-S4, 17.3R4, 17.4 – < 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3, 18.1 – < 18.1R2-S4, 18.1R3-S4, 18.1R4, 18.2 – < 18.2R2-S2, 18.2R2-S3, 18.2R3, 18.2X75 – < 18.2X75-D40, 18.3 – < 18… 16.1R7-S4, 16.1R7-S5

References