CVE-2021-0282: Improper Check for Unusual or Exceptional Conditions

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this UPDATE message will create a sustained Denial of...

CVE-2021-0281: Improper Check for Unusual or Exceptional Conditions

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

CVE-2021-0287: Improper Check for Unusual or Exceptional Conditions

In a Segment Routing ISIS SR-ISIS/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Segment Routing and sensor-based statistics, a flap of a ISIS link in the network, can lead to a routing process daemon RPD crash and restart,...

CVE-2021-0282

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this UPDATE message will create a sustained Denial of...

PT-2021-3645

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.3R3-S12 Juniper Networks Junos OS versions prior to 17.4R3-S5 Juniper Networks Junos OS versions prior to 18.1R3-S13 Juniper Networks Junos OS versions prior to 18.2R3-S8 Juniper Networks Junos OS...

PT-2021-3643

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 19.4 through 19.4R1-S4, 19.4R3-S2; 20.1 versions prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R2 Juniper Networks Junos OS Evolved versions 20.3-EVO prior t...

PT-2021-3635

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3R12-S18 Juniper Networks Junos OS versions prior to 15.1R7-S9 Juniper Networks Junos OS versions prior to 17.3R3-S11 Juniper Networks Junos OS versions prior to 17.4R2-S13 Juniper Networks Junos ...

CVE-2021-0250

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

CVE-2021-0236

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

Input validation

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

CVE-2021-0250 Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

CVE-2021-0250

CVE-2021-0250 is a vulnerability in Juniper Networks Junos OS (and Junos OS Evolved) where, in SRTE/BGP monitoring contexts, processing a crafted BGP update message can cause the Routing Protocol Daemon (RPD) to core, leading to a DoS. Affected: Junos OS versions 17.4R1 and later before 17.4R2-S6...

PT-2021-12961

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.4R1 through 17.4R2-S6, 17.4R3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S7 Juniper Networks Junos OS versions 18.2 through 18.2R2-S6, 18.2R3-S3 Juniper Networks Junos OS versions 18.3 through...

CVE-2021-0250: Undefined Security Weakness

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

CVE-2021-0236

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

CVE-2021-0211

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon RPD service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain...

CVE-2021-0209

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service DoS. Continued receipt of these types of valid BGP update packets will cause an extended Denia...

Input validation

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon RPD service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain...

Design/Logic Flaw

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service DoS. Continued receipt of these types of valid BGP update packets will cause an extended Denia...

Input validation

An improper input validation vulnerability in the Routing Protocol Daemon RPD service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when bidirectional LSPs are in use, which when received by an egress router crashes the RPD causing a Denial of Service DoS...