PT-2024-5567 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.4R3-S8 Junos OS versions from 22.2 before 22.2R3-S4 Junos OS versions from 22.3 before 22.3R3-S3 Junos OS versions from 22.4 before 22.4R3-S3 Junos OS versions from 23.2 before 23.2R2-S1 Junos OS versions from 23...

PT-2024-7396 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.4R3-S8 Junos OS versions 22.2 prior to 22.2R3-S5 Junos OS versions 22.3 prior to 22.3R3-S4 Junos OS versions 22.4 prior to 22.4R3-S3 Junos OS versions 23.2 prior to 23.2R2-S2 Junos OS versions 23.4 prior to 23.4R...

The vulnerability of the network routing implementation software on Unix-like systems, related to memory release errors, allows a hacker to cause a service failure.

The vulnerability of the FRRouting software for implementing network routing on Unix-like systems is related to the improper processing of the BGP UPDATE message created with the MPUNREACHNLRI attribute and additional data NLRI. Exploiting this vulnerability can allow a malicious actor to cause...

The vulnerability of the network routing implementation software on Unix-like systems, related to memory release errors, allows a hacker to cause a service failure.

The vulnerability of the FRRouting software for implementing network routing on Unix-like systems is related to improper processing of the BGP UPDATE message sent with EOR. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the bgpd/bgp_packet.c file in the networking routing implementation software for Unix-like systems, related to out-of-memory reading, allows attackers to disclose protected information or cause service failures.

The vulnerability of the bgpd/bgppacket.c file in the networking routing implementation software for Unix-like systems in FRRouting is related to reading the initial byte of the ORF header during a race condition. Exploiting this vulnerability can allow a malicious actor to disclose sensitive...

The vulnerability of the `bgp_capability_msg_parse()` function in the BGP routing software implementation for Unix-like systems allows a attacker to cause service failures or disclose sensitive information.

The vulnerability of the bgpcapabilitymsgparse function in the BGP routing daemon of the FRRouting software for Unix-like systems involves reading data beyond the memory limit. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information...

SUSE CVE-2021-26928

BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD which may, for example, include Tigera products in some configurations, as well as products of other vendors may have been susceptible to route redirection for Denia...

USN-6794-1 frr vulnerabilities

It was discovered that FRR incorrectly handled certain malformed BGP and OSPF packets. A remote attacker could use this issue to cause FRR to crash, resulting in a denial of service, or possibly execute arbitrary code...

frr: missing length check in bgp_attr_psid_sub() can lead do DoS

A flaw was found in frr that may allow a remote attacker to cause a denial of service via the bgpattrpsidsub function...

frr: processes invalid NLRIs if attribute length is zero

A flaw was found in FRRouting, where it is susceptible to a denial of service vulnerability triggered by a NULL pointer dereference issue during the processing of Network Layer Reachability Information NLRIs with a zero attribute length. The vulnerability arises from inadequate validation of...

frr: ahead-of-stream read of ORF header

An out-of-bounds read flaw was found in FRRouting in bgpd/bgppacket.c, resulting from a boundary condition. This flaw allows a remote attacker, through specially crafted input, to read the initial byte of the ORF header in an ahead-of-stream scenario. This attacker can gain information and...

frr: processes invalid NLRIs if attribute length is zero

A flaw was found in FRRouting, where it is susceptible to a denial of service vulnerability triggered by a NULL pointer dereference issue during the processing of Network Layer Reachability Information NLRIs with a zero attribute length. The vulnerability arises from inadequate validation of...

frr: crafted BGP UPDATE message leading to a crash

A flaw was found in FRRouting. A crash can occur for a crafted BGP UPDATE message without mandatory attributes for example, one with only an unknown transit attribute...

frr: out of bounds read in bgp_attr_aigp_valid

A flaw was found in FRRouting that involves a heap-based buffer overflow in the bgpattraigpvalid function within bgpd/bgpattr.c. This flaw allows a remote attacker to send specially crafted data to the application, initiating an out-of-bounds read error and executing a denial of service DoS attac...

frr: incorrect length check in bgp_capability_llgr() can lead do DoS

A flaw was found in frr that may allow a remote attacker to cause a denial of service via the bgpcapabilityllgr function...

frr: missing length check in bgp_attr_psid_sub() can lead do DoS

A flaw was found in frr that may allow a remote attacker to cause a denial of service via the bgpattrpsidsub function...

GoBGP 安全漏洞

GoBGP is an open source Border Gateway Protocol BGP implementation from osrg open source. A security vulnerability exists in gobgp. A remote attacker could exploit this vulnerability to cause a denial of service via the HandlingError function in pkg/server/fsm.go...

The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient validation of input data types during a established BGP session. This occurs due to incorrectly defined Tunnel encapsulation attributes with incorre...

CVE-2024-21598

An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. If a BGP update is received over an established BGP sessio...

PT-2024-2855 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S7 Junos OS versions from 21.4 before 21.4R3-S5 Junos OS versions from 22.1 before 22.1R3-S4 Junos OS versions from 22.2 before 22.2R3-S2 Junos OS versions from 22.3 before 22.3R3-S1 Junos OS versions from 22...