Lucene search
+L

22 matches found

NVD
NVD
•added 2026/10/14 5:17 p.m.•9 views

CVE-2026-102028

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured...

8.7CVSS0.00549EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 4:57 p.m.•14 views

EUVD-2026-101395

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed...

8.7CVSS5.8AI score0.00374EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 4:49 p.m.•9 views

EUVD-2026-101353

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured...

8.7CVSS5.8AI score0.00549EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•15 views

PT-2026-113929

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed...

8.7CVSS5.9AI score0.00374EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2016-2369

Malware in sbrugna...

7.5CVSS7.3AI score0.01259EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/12 4:12 p.m.•47 views

CVE-2025-20142 Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability

A vulnerability in the IPv4 access control list ACL feature and quality of service QoS policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an...

8.6CVSS0.00549EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/07/14 5:43 p.m.•24 views

CVE-2023-36840 Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run

A Reachable Assertion vulnerability in Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a Denial of Service DoS. On all Junos OS and Junos OS Evolved, when a specific L2VPN command is run, RPD will crash and...

5.5CVSS7.2AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/14 5:43 p.m.•75 views

CVE-2023-36840 Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run

A Reachable Assertion vulnerability in Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a Denial of Service DoS. On all Junos OS and Junos OS Evolved, when a specific L2VPN command is run, RPD will crash and...

5.5CVSS5.9AI score0.00194EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/14 12:00 a.m.•8 views

CVE-2023-36840: Reachable Assertion

A Reachable Assertion vulnerability in Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a Denial of Service DoS. On all Junos OS and Junos OS Evolved, when a specific L2VPN command is run, RPD will crash and...

5.5CVSS6AI score0.00194EPSS
SaveExploits0References3
Prion
Prion
•added 2022/04/15 3:15 p.m.•37 views

Race condition

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

7.1CVSS6.7AI score0.01226EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/15 12:00 a.m.•9 views

CVE-2022-20758: Undefined Security Weakness

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

7.1CVSS6.4AI score0.01226EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/10/07 12:00 a.m.•71 views

Cisco IOS Software MP BGP EVPN DoS (cisco-sa-ios-bgp-evpn-dos-LNfYJxfF)

According to its self-reported version, IOS is affected by a denial of service DoS vulnerability in the Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family. An unauthenticated, remote attacker can exploit this, by sending BGP update messages wit...

7.8CVSS7.5AI score0.01097EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/24 12:00 a.m.•9 views

CVE-2020-3479: Improper Input Validation

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...

7.8CVSS5.9AI score0.01097EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2019/05/16 2:29 a.m.•19 views

CVE-2019-1849

A vulnerability in the Border Gateway Patrol BGP Multiprotocol Label Switching MPLS-based Ethernet VPN EVPN implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to a...

6.5CVSS6.9AI score0.00646EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/05/15 12:00 a.m.•14 views

PT-2019-2199

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to a logic error in the Border Gateway Protocol BGP Multiprotocol Label Switching MPLS-based Ethernet VPN EVPN implementation of Cisco IOS XR Software. This error...

7.4CVSS0.00646EPSS
SaveExploits0References6
NVD
NVD
•added 2016/04/15 2:59 p.m.•36 views

CVE-2016-1270

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

7.5CVSS7.4AI score0.01259EPSS
SaveExploits0References1
Prion
Prion
•added 2016/04/15 2:59 p.m.•26 views

Code injection

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

5CVSS7.1AI score0.01259EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2016/04/15 2:00 p.m.•55 views

CVE-2016-1270

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

7.4AI score0.01259EPSS
SaveExploits0References1
CVE
CVE
•added 2016/04/15 2:00 p.m.•78 views

CVE-2016-1270

Juniper Junos OS rpd daemon is vulnerable to a denial-of-service condition triggered by crafted BGP-based L2VPN/VPLS updates. Affected releases include several 12.x, 13.x, and 14.x trains listed in CVE-2016-1270; when the device is configured for BGP-based L2VPN or VPLS, processing a malformed L2...

7.5CVSS7.3AI score0.01259EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/15 12:00 a.m.•13 views

CVE-2016-1270: Undefined Security Weakness

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

7.5CVSS7.3AI score0.01259EPSS
SaveExploits0References2
Rows per page
Query Builder