An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon allows an attacker to crash RPD thereby causing a Denial of Service (DoS) condition. This framework requires these packets to be passed. By continuously sending any of these types of formatted genuine packets, an attacker can repeatedly crash the RPD process causing a sustained Denial of Service. Authentication to the BGP peer is not required. This issue can be initiated or propagated through eBGP and iBGP and can impact devices in either modes of use as long as the devices are configured to support the compromised framework and a BGP path is activated or active. This issue affects: Juniper Networks Junos OS 16.1 versions 16.1R7-S6 and later
The following software releases have been updated to resolve this specific issue: 16.1R7-S8, 17.3R3-S8, 17.4R2-S11, 17.4R3-S2, 18.1R3-S10, 18.2R2-S7, 18.2R3-S5, 18.2X75-D32, 18.2X75-D33, 18.2X75-D420, 18.2X75-D52, 18.2X75-D60, 18.2X75-D65, 18.2X75-D70;(*1), 18.3R2-S4, 18.3R3-S2, 18.4R1-S7, 18.4R2-S5, 18.4R3-S3(*2), 19.1R1-S5, 19.1R2-S2, 19.1R3-S2, 19.2R1-S5, 19.2R2, 19.2R3, 19.3R2-S3, 19.3R3, 19.4R1-S2, 19.4R2, 19.4R3, 20.1R1-S1, 20.1R2, 20.2R1, and subsequent releases. *1: For 18.2X75 customers. Please speak with your account manager regarding applicable respin release identifiers for affected-to to affected-from, and resolved-in release targets. *2: Pending publication.
There are no available workarounds for this issue.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Juniper Networks Junos OS | >=16.1R7-S6<16.1* | 16.1* | advisory ↗ |
| Juniper Networks Junos OS | >=17.3R2-S5, 17.3R3-S6<17.3* | 17.3* | advisory ↗ |
| Juniper Networks Junos OS | >=17.4R2-S7, 17.4R3<17.4* | 17.4* | advisory ↗ |
| Juniper Networks Junos OS | >=18.1R3-S7<18.1* | 18.1* | advisory ↗ |
| Juniper Networks Junos OS | >=18.2R2-S6, 18.2R3-S2<18.2* | 18.2* | advisory ↗ |
| Juniper Networks Junos OS | >=18.2X75-D12, 18.2X75-D32, 18.2X75-D33, 18.2X75-D51, 18.2X75-D60, 18.2X75-D411, 18.2X75-D420<18.2X75* | 18.2X75* | advisory ↗ |
| Juniper Networks Junos OS | >=18.3R1-S6, 18.3R2-S3, 18.3R3<18.3* | 18.3* | advisory ↗ |
| Juniper Networks Junos OS | >=18.4R1-S5, 18.4R2-S4, 18.4R3<18.4* | 18.4* | advisory ↗ |
| Juniper Networks Junos OS | >=19.1R1-S3, 19.1R2<19.1* | 19.1* | advisory ↗ |
| Juniper Networks Junos OS | >=19.2R1-S2, 19.2R2<19.2* | 19.2* | advisory ↗ |
| Juniper Networks Junos OS | >=19.3<19.3R2-S3, 19.3R3 | 19.3R2-S3, 19.3R3 | advisory ↗ |
| Juniper Networks Junos OS | >=19.4<19.4R1-S2, 19.4R2, 19.4R3 | 19.4R1-S2, 19.4R2, 19.4R3 | advisory ↗ |
| Juniper Networks Junos OS | >=20.1<20.1R1-S1, 20.1R2 | 20.1R1-S1, 20.1R2 | advisory ↗ |