Description
An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).
When conflicting information (IP or ISO addresses) about a node is added to the Traffic Engineering (TE) database and then a subsequent operation attempts to process these, rpd will crash and restart.
This issue affects:
Junos OS:
* 22.4 versions before 22.4R3-S1,
* 23.2 versions before 23.2R2,
* 23.4 versions before 23.4R1-S1, 23.4R2,
This issue does not affect Junos OS versions earlier than 22.4R1.
Junos OS Evolved:
* 22.4-EVO versions before 22.4R3-S2-EVO,
* 23.2-EVO versions before 23.2R2-EVO,
* 23.4-EVO versions before 23.4R1-S1-EVO, 23.4R2-EVO,
This issue does not affect Junos OS Evolved versions earlier than
before 22.4R1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Junos OS | 22.4 – < 22.4R3-S1, 23.2 – < 23.2R2, 23.4 – < 23.4R1-S1, 23.4R2 | 22.4R3-S1 |
| Juniper Networks | Junos OS Evolved | 22.4-EVO – < 22.4R3-S2-EVO, 23.2-EVO – < 23.2R2-EVO, 23.4-EVO – < 23.4R1-S1-EVO, 23.4R2-EVO | 22.4R3-S2-EVO |
Advisories 2
- WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- NCSC-2024-0290 Kwetsbaarheden verholpen in Juniper Junos OS en Junos OS Evolved NCSC-NL (Netherlands) · Jul 12, 2024
References
- https://supportportal.juniper.net/JSA83001 vendor-advisory