Lucene search
+L

52 matches found

CVE
CVE
added 2025/01/09 4:49 p.m.72 views

CVE-2025-21600

CVE-2025-21600 describes an Out-of-Bounds Read in Juniper’s routing protocol daemon (rpd) used by Junos OS and Junos OS Evolved. An unauthenticated, directly connected BGP peer sending a malformed BGP packet can crash and restart rpd, causing a DoS. Affected: iBGP/eBGP with any address family, fo...

7.1CVSS6.7AI score0.00242EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/01/09 4:49 p.m.40 views

CVE-2025-21600 Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

An Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service DoS...

7.1CVSS0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 4:49 p.m.14 views

CVE-2025-21602 Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sending a specific BGP update packet to cause rpd to crash and restart, resulting in a Denial of Service Do...

7.1CVSS7.1AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/09 8:15 p.m.17 views

CVE-2024-39525

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specific BGP packet to cause rpd to crash and restart, resulting in a Denial of Service...

8.7CVSS0.00431EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/09 8:15 p.m.12 views

CVE-2024-39515

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Deni...

8.7CVSS5.8AI score0.00457EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/09 8:01 p.m.74 views

CVE-2024-39525

CVE-2024-39525 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an improper handling of exceptional conditions in the routing protocol daemon (rpd) that can be triggered by an unauthenticated network-based attacker sending a crafted BGP packet, causing rpd to crash and restart...

8.7CVSS7.6AI score0.00431EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2024/10/09 8:00 p.m.14 views

CVE-2024-39516 Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

An Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service DoS. Continued...

8.7CVSS7.6AI score0.00431EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/09 8:00 p.m.28 views

CVE-2024-39516 Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

An Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service DoS. Continued...

8.7CVSS0.00431EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/11 5:15 p.m.22 views

CVE-2024-39552

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause the RPD process to crash leading to a Denial of Service DoS. When a malformed BGP UPDATE pack...

8.7CVSS0.00593EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/11 4:30 p.m.91 views

CVE-2024-39552

CVE-2024-39552 affects Juniper Networks Junos OS and Junos OS Evolved: the RPD (routing protocol daemon) crashes when a malformed BGP UPDATE is received over an established BGP session, causing DoS. A network-based, unauthenticated attacker can trigger the crash via IPv4/IPv6 eBGP/iBGP traffic; i...

8.7CVSS7.6AI score0.00593EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2024/07/10 11:15 p.m.42 views

CVE-2024-39555

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specific malformed BGP update message to cause the session to reset, resulting in a Denial of Service DoS. Continued recei...

8.7CVSS0.00503EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/10 10:36 p.m.53 views

CVE-2024-39555 Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specific malformed BGP update message to cause the session to reset, resulting in a Denial of Service DoS. Continued recei...

8.7CVSS0.00503EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/10 10:36 p.m.67 views

CVE-2024-39555

Summary of vulnerability (CVE-2024-39555): Juniper Networks Junos OS and Junos OS Evolved RPD mishandles certain malformed BGP Update messages when segment routing is enabled, causing session resets and potential DoS. A remote attacker must have at least one established BGP session; affected are ...

8.7CVSS7.7AI score0.00503EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2024/03/08 12:00 a.m.32 views

Cisco NX-OS Allocation of Resources Without Limits or Throttling (CVE-2024-20321)

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS7.8AI score0.00709EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/01 12:00 a.m.37 views

Cisco Nexus 3600 External BGP DoS (cisco-sa-nxos-po-acl-TkyePgvL)

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS7.8AI score0.00709EPSS
SaveExploits0References5
NVD
NVD
added 2024/02/29 1:43 a.m.26 views

CVE-2024-20321

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS8.4AI score0.00709EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/29 1:43 a.m.20 views

Design/Logic Flaw

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

5CVSS7.3AI score0.00709EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/28 4:14 p.m.37 views

CVE-2024-20321

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS8.6AI score0.00709EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/28 4:14 p.m.153 views

CVE-2024-20321

CVE-2024-20321 affects Cisco NX-OS Software’s eBGP implementation. The issue arises because eBGP traffic is mapped to a shared hardware rate-limiter queue, enabling an unauthenticated, remote attacker to cause a DoS by sending large volumes of traffic with specific characteristics, potentially dr...

8.6CVSS8.3AI score0.00709EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/28 4:14 p.m.18 views

CVE-2024-20321

A vulnerability in the External Border Gateway Protocol eBGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware...

8.6CVSS7AI score0.00709EPSS
SaveExploits0References1
Rows per page
Query Builder