CVE-2022-22230

CVE-2022-22230 describes an Improper Input Validation in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent, unauthenticated attacker can cause a Denial of Service by triggering rpd to crash when a router generates multiple specific OSPFv3 LSAs; affec...

CVE-2022-22230 Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause DoS Denial of Service. If another router generates more than one specific valid OSPFv3 LSA then rpd will crash while...

CVE-2022-22225 Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with an established BGP session to cause a Denial of Service DoS. In a BGP multipath scenario, when one of the...

CVE-2022-22225

TOCTOU race condition in Juniper Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd) allows an unauthenticated attacker on an established BGP session to trigger a DoS by crashing rpd when a route in a BGP multipath flap scenario is a contributing route. Affected versions include Junos O...

CVE-2022-22220 Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS, Junos OS Evolved allows a network-based unauthenticated attacker to cause a Denial of Service DoS. When a BGP flow route with redirect IP extended community is received, an...

CVE-2022-22208 Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions

A Use After Free vulnerability in the Routing Protocol Daemon rdp of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service DoS. When a BGP session flap happens, a Use After Free of a memory location that was assigned to another...

PT-2022-6647 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.2R3-S6 Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S6 Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S8 Juniper Networks Junos OS versions 20.1 prior to 20.1R3-S2 Juniper...

Juniper Junos OS Vulnerability (JSA69875)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69875 advisory. - A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA69896)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69896 advisory. - An Allocation of Resources Without Limits or Throttling and a Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon rpd of Junipe...

Juniper Junos OS Vulnerability (JSA69887)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69887 advisory. - An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally...

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol Used in IBM System Networking Ethernet Switches (CVE-2013-5385)

Abstract Many IBM System Networking Ethernet switches use the OSPFv2 routing protocol, which has an ambiguity that can be exploited to allow network traffic to be black-holed and/or redirected. Remediation for this vulnerability consists of updating the IBM Networking Operating System NOS running...

CVE-2022-35927 Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In the RPL-Classic routing protocol implementation in the Contiki-NG operating system, an incoming DODAG Information Option DIO control message can contain a prefix information option with a length parameter. The value...

PT-2022-10093 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.7 Description: Contiki-NG is an open-source, cross-platform operating system for IoT devices. A buffer overflow can occur when copying an IPv6 address prefix in the RPL-Classic implementation. To trigger this...

CVE-2022-22213

A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading ...

CVE-2022-22213 Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update

A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading ...

The vulnerability of the Junos operating system arises from insufficient validation of input data in the Routing Protocol Data Unit (RPD). This allows attackers to trigger a service failure.

The vulnerability of the Junos operating system exists due to insufficient validation of input data in the routing protocol daemon rpd. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the routing protocol demon on the Junos operating system, which allows a attacker to cause a service failure

The vulnerability of the routing protocol demon on the Junos operating system is related to improper initialization. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Juniper Junos OS Vulnerability (JSA69503)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69503 advisory. - An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally...

CVE-2022-22193

An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. Continued execution of this command might cause a sustained...

CVE-2022-22196

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...