Juniper Junos OS Vulnerability (JSA69717)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69717 advisory. - A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated...

The vulnerabilities of the functions `bgp_notify_send_with_data()` and `bgp_process_packet()` (from the file `bgp_packet.c`) of the FRRouting network routing implementation software on Unix-like systems allow a attacker to execute arbitrary code.

The vulnerabilities of the functions bgpnotifysendwithdata and bgpprocesspacket in the bgppacket.c file of the networking routing software for Unix-like systems in FRRouting are related to the use of memory after it is freed. Exploiting these vulnerabilities could allow a malicious actor, operati...

CVE-2022-37035

A flaw was found in bgpd in FRRouting FRR. There is a possible use-after-free issue due to a race condition in bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c. This issue can lead to remote code execution or information disclosure by sending crafted BGP packets...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

Race condition

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

PT-2022-4283 · Frrouting +4 · Frrouting +4

Name of the Vulnerable Software and Affected Versions: FRRouting FRR version 8.3 Description: A possible use-after-free due to a race condition was discovered in the bgpd component of FRRouting. This issue affects the bgp notify send with data and bgp process packet functions in bgp packet.c. It...

CVE-2022-22213

A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading ...

Design/Logic Flaw

A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading ...

CVE-2022-22213

CVE-2022-22213 affects Juniper Networks Junos OS and Junos OS Evolved. A vulnerability in the Routing Protocol Daemon (RPD) handling of undefined values can allow an unauthenticated, network-based attacker to crash the RPD by sending a crafted BGP update while the host is under heavy load, leadin...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from an attacker being able to cause a denial of...

Juniper Junos OS FPC Crash (JSA11229)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11229 advisory. A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows an adjacent attacker...

CVE-2022-20758

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

CVE-2022-20694

A vulnerability in the implementation of the Resource Public Key Infrastructure RPKI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol BGP process to crash, resulting in a denial of service DoS condition. This vulnerability is du...

Race condition

A vulnerability in the implementation of the Resource Public Key Infrastructure RPKI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol BGP process to crash, resulting in a denial of service DoS condition. This vulnerability is du...

Race condition

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

CVE-2022-20758 Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...