CVE-2020-1644: Improper Check or Handling of Exceptional Conditions

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

PT-2020-5900

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.3R3-S6 through 18.1R3-S7 Juniper Networks Junos OS Evolved versions 19.2R2-EVO through versions prior to 19.3R1-EVO Description: The issue occurs when a specific UPDATE for an EBGP peer is processed,...

PT-2020-5898

Name of the Vulnerable Software and Affected Versions: Junos OS versions 17.2X75 through 17.2X75-D105.18 Junos OS versions 17.3 through 17.3R3-S7 Junos OS versions 17.4 through 17.4R2-S9 Junos OS versions 18.1 through 18.1R3-S9 Junos OS versions 18.2 through 18.2R2-S6 Junos OS versions 18.2X75...

Design/Logic Flaw

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...

CVE-2020-1632 Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...

CVE-2020-1632

CVE-2020-1632 describes a DoS in Juniper Junos OS and Junos OS Evolved where receipt of a crafted BGP UPDATE can cause peers to terminate sessions by advertising an invalid UPDATE, particularly when at least one BGP session does not support RFC 4893 4-byte AS. Affected software ranges across many...

CVE-2020-1632: Improper Handling of Exceptional Conditions

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...

PT-2020-4097

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 16.1R7-S6 Junos OS versions prior to 16.2R2-S11 Junos OS versions prior to 17.1R2-S11 Junos OS versions prior to 17.1R3-S2 Junos OS versions prior to 17.2R1-S9 Junos OS versions prior to 17.2R2-S8 Junos OS versions...

CVE-2019-16020: Uncontrolled Resource Consumption

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-15989: Improper Check for Unusual or Exceptional Conditions

A vulnerability in the implementation of the Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that contains a...

CVE-2019-16022: Uncontrolled Resource Consumption

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16018: Uncontrolled Resource Consumption

A vulnerability in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that...

PT-2020-1385

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software. It could allow an unauthenticated, remote...

PT-2020-1380

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of the Border Gateway Protocol BGP functionality could allow an unauthenticated, remote attacker to cause a denial of service DoS condition...

PT-2020-1383

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality. These vulnerabilities could allow an...

PT-2020-1376

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality could allow an unauthenticated, remote attacker to cause a denial of service...

PT-2020-1384

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software. It could allow an unauthenticated, remote...

PT-2020-1382

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality. These vulnerabilities could allow an...

PT-2020-1381

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software. It could allow an unauthenticated, remote...

CVE-2019-1909: Improper Input Validation

A vulnerability in the implementation of Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to incorrect processing of certain BGP update...