CVSS 7.5 · High EPSS 0,41%
Kerentanan Buffer Over-read pada juniper junos, juniper junos os evolved. Skor CVSS 3.1 7.5 (High) menurut juniper.net.
A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When an affected device receives a BGP update with a set of specific optional transitive attributes over an established peering session, rpd will crash and restart when attempting to advertise the received information to another peer. This issue can only happen if one or both of the BGP peers of the receiving session are non-4-byte-AS capable as determined from the advertised capabilities during BGP session establishment. Junos OS and Junos OS Evolved default behavior is 4-byte-AS capable unless this has been specifically disabled by configuring: [ protocols bgp ... disable-4byte-as ] Established BGP sessions can be checked by executing: show bgp neighbor <IP address> | match "4 byte AS" This issue affects: Junos OS: * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S5, * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S2, * 24.4 versions before 24.4R2; Junos OS Evolved: * all versions before 22.4R3-S8-EVO, * 23.2 versions before 23.2R2-S5-EVO, * 23.4 versions before 23.4R2-S6-EVO, * 24.2 versions before 24.2R2-S2-EVO, * 24.4 versions before 24.4R2-EVO.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| juniper | junos | Semua versi sebelum 22.4 |
| juniper | junos | Versi 22.4 |
| juniper | junos | Versi 22.4 r1 |
| juniper | junos | Versi 22.4 r1-s1 |
| juniper | junos | Versi 22.4 r1-s2 |
| juniper | junos | Versi 22.4 r2 |
| juniper | junos | Versi 22.4 r2-s1 |
| juniper | junos | Versi 22.4 r2-s2 |
| juniper | junos | Versi 22.4 r3 |
| juniper | junos | Versi 22.4 r3-s1 |
| juniper | junos | Versi 22.4 r3-s2 |
| juniper | junos | Versi 22.4 r3-s3 |
| juniper | junos | Versi 22.4 r3-s4 |
| juniper | junos | Versi 22.4 r3-s5 |
| juniper | junos | Versi 22.4 r3-s6 |
| juniper | junos | Versi 22.4 r3-s7 |
| juniper | junos | Versi 23.2 |
| juniper | junos | Versi 23.2 r1 |
| juniper | junos | Versi 23.2 r1-s1 |
| juniper | junos | Versi 23.2 r1-s2 |
| juniper | junos | Versi 23.2 r2 |
| juniper | junos | Versi 23.2 r2-s1 |
| juniper | junos | Versi 23.2 r2-s2 |
| juniper | junos | Versi 23.2 r2-s3 |
| juniper | junos | Versi 23.2 r2-s4 |
| juniper | junos | Versi 23.4 |
| juniper | junos | Versi 23.4 r1 |
| juniper | junos | Versi 23.4 r1-s1 |
| juniper | junos | Versi 23.4 r1-s2 |
| juniper | junos | Versi 23.4 r2 |
| juniper | junos | Versi 23.4 r2-s1 |
| juniper | junos | Versi 23.4 r2-s2 |
| juniper | junos | Versi 23.4 r2-s3 |
| juniper | junos | Versi 23.4 r2-s4 |
| juniper | junos | Versi 23.4 r2-s5 |
| juniper | junos | Versi 24.2 |
| juniper | junos | Versi 24.2 r1 |
| juniper | junos | Versi 24.2 r1-s1 |
| juniper | junos | Versi 24.2 r1-s2 |
| juniper | junos | Versi 24.2 r2 |
| juniper | junos | Versi 24.2 r2-s1 |
| juniper | junos | Versi 24.4 |
| juniper | junos | Versi 24.4 r1 |
| juniper | junos | Versi 24.4 r1-s2 |
| juniper | junos | Versi 24.4 r1-s3 |
| juniper | junos os evolved | Semua versi sebelum 22.4 |
| juniper | junos os evolved | Versi 22.4 |
| juniper | junos os evolved | Versi 22.4 r1 |
| juniper | junos os evolved | Versi 22.4 r1-s1 |
| juniper | junos os evolved | Versi 22.4 r1-s2 |
| juniper | junos os evolved | Versi 22.4 r2 |
| juniper | junos os evolved | Versi 22.4 r2-s1 |
| juniper | junos os evolved | Versi 22.4 r2-s2 |
| juniper | junos os evolved | Versi 22.4 r3 |
| juniper | junos os evolved | Versi 22.4 r3-s1 |
| juniper | junos os evolved | Versi 22.4 r3-s2 |
| juniper | junos os evolved | Versi 22.4 r3-s3 |
| juniper | junos os evolved | Versi 22.4 r3-s4 |
| juniper | junos os evolved | Versi 22.4 r3-s5 |
| juniper | junos os evolved | Versi 22.4 r3-s6 |