539 matches found
UBUNTU-CVE-2023-38802
FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...
Juniper Junos OS Vulnerability (JSA10866)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10866 advisory. - The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended...
CVE-2023-0026: Improper Input Validation
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When a BGP update message is received over an established BGP session, and that messa...
CVE-2022-22184: Improper Input Validation
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...
CVE-2022-22184
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...
Input validation
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...
CVE-2022-22220 Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route
A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS, Junos OS Evolved allows a network-based unauthenticated attacker to cause a Denial of Service DoS. When a BGP flow route with redirect IP extended community is received, an...
Juniper Junos OS Vulnerability (JSA69717)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69717 advisory. - A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated...
CVE-2022-22213: Improper Handling of Undefined Values
A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading ...
PT-2022-6115
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 21.1R3-S1 Juniper Networks Junos OS versions prior to 21.2R2-S2, 21.2R3 Juniper Networks Junos OS versions prior to 21.3R2, 21.3R3 Juniper Networks Junos OS versions prior to 21.4R1-S1, 21.4R2 Junipe...
Juniper Networks Junos OS 安全漏洞
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from an attacker being able to cause a denial of...
Race condition
A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...
CVE-2022-20758: Undefined Security Weakness
A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...
CVE-2022-20758
A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...
PT-2022-2276
Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality could allow an unauthenticated, remote attacker to cause a denial of...
Juniper Junos OS DoS (JSA11274)
The version of Junos OS installed on the remote host is affected by a denial of service vulnerability due to the routing protocol rdp daemon not properly validating data properly in BGP update messages. An unauthenticated, remote attacker can exploit this, by sending a malformed BGP update messag...
Input validation
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service DoS. If a BGP update message is received over an established BGP...
CVE-2022-22166
CVE-2022-22166 affects Juniper Networks Junos OS rpd (routing protocol daemon). A DoS can be triggered by receiving a BGP update with a malformed SR-TE policy tunnel attribute when BGP update tracing is enabled, causing an rpd crash that does not propagate. Affected are Junos OS 20.4 versions pri...
CVE-2022-22166 Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service DoS. If a BGP update message is received over an established BGP...
CVE-2022-22166: Improper Validation of Specified Quantity in Input
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service DoS. If a BGP update message is received over an established BGP...