CVE-2023-28980

CVE-2023-28980 affects Juniper Networks Junos OS and Junos OS Evolved. A Use-After-Free in the routing protocol daemon (rpd) can crash the rpd in a BGP rib sharding scenario, allowing a locally authenticated, low-privileged attacker to cause DoS, especially with large routing tables (>1M). Con...

CVE-2023-28964 Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause an RPD crash leading to a Denial of Service DoS. Continued receipt and processing of...

PT-2023-22062 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 20.2R3-S5 through 20.2R3-S6 Juniper Networks Junos OS versions 20.3R3-S2 through 20.3R3-S5 Juniper Networks Junos OS versions 20.4R3-S1 through 20.4R3-S4 Juniper Networks Junos OS versions 21.1R3 through...

Juniper Junos OS Vulnerability (JSA70588)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70588 advisory. - An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network...

Juniper Junos OS Vulnerability (JSA70608)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70608 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA70606)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70606 advisory. - A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges...

SUSE CVE-2004-0461

The DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of servic...

SUSE CVE-2015-7702

The cryptoxmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service crash. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750...

SUSE CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

The vulnerability of the Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS Evolved and Junos operating systems allows a attacker to cause a service failure.

The vulnerability of the Routing Protocol Daemon rpd in Juniper Networks’ Junos OS Evolved and Junos operating systems exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2023-22407

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected...

CVE-2023-22398

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

Juniper Networks Junos OS 缓冲区错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from an out-of-bounds write...

CVE-2023-22398: Access of Uninitialized Pointer

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

Juniper Junos OS Vulnerability (JSA70181)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70181 advisory. - An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attack...

CVE-2023-22398 Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

CVE-2022-22184 Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

Input validation

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

The vulnerability of the Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS operating systems allows a hacker to cause a service failure.

The vulnerability of the Routing Protocol Daemon RPD in Juniper Networks’ Junos OS operating systems is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow a malicious actor to cause service failures using the IPv6 network protocol...

CVE-2022-22230

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause DoS Denial of Service. If another router generates more than one specific valid OSPFv3 LSA then rpd will crash while...