A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a Denial of Service (DoS). On all Junos OS and Junos OS Evolved, when a specific L2VPN command is run, RPD will crash and restart. Continued execution of this specific command will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS All versions prior to 19.3R3-S10; 20.1 versions prior to 20.1R3-S4; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R3; 22.2 ve
The following software releases have been updated to resolve this specific issue: Junos OS: 19.3R3-S7, 19.4R3-S10, 20.2R3-S6, 20.4R3-S5, 21.1R3-S4, 21.2R3-S3, 21.3R3-S2, 21.4R3, 22.1R3, 22.2R2, 22.3R2, 22.4R1, and all subsequent releases; Junos OS Evolved: 20.4R3-S7-EVO, 21.4R3-EVO, 22.1R3-EVO, 22.2R2-EVO, 22.3R2-EVO, 22.4R1-EVO, and all subsequent releases.
This issue can be avoided by using access lists or firewall filters to limit access to the device to only trusted hosts, networks and administrators.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Juniper Networks Junos OS | >=unspecified<19.3R3-S10 | 19.3R3-S10 | advisory ↗ |
| Juniper Networks Junos OS | >=20.1<20.1R3-S4 | 20.1R3-S4 | advisory ↗ |
| Juniper Networks Junos OS | >=20.2<20.2R3-S6 | 20.2R3-S6 | advisory ↗ |
| Juniper Networks Junos OS | >=20.3<20.3R3-S6 | 20.3R3-S6 | advisory ↗ |
| Juniper Networks Junos OS | >=20.4<20.4R3-S5 | 20.4R3-S5 | advisory ↗ |
| Juniper Networks Junos OS | >=21.1<21.1R3-S4 | 21.1R3-S4 | advisory ↗ |
| Juniper Networks Junos OS | >=21.2<21.2R3-S3 | 21.2R3-S3 | advisory ↗ |
| Juniper Networks Junos OS | >=21.3<21.3R3-S2 | 21.3R3-S2 | advisory ↗ |
| Juniper Networks Junos OS | >=21.4<21.4R3 | 21.4R3 | advisory ↗ |
| Juniper Networks Junos OS | >=22.1<22.1R3 | 22.1R3 | advisory ↗ |
| Juniper Networks Junos OS | >=22.2<22.2R2 | 22.2R2 | advisory ↗ |
| Juniper Networks Junos OS | >=22.3<22.3R2 | 22.3R2 | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=unspecified<20.4R3-S7-EVO | 20.4R3-S7-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=21.1<21.1R3-S3-EVO | 21.1R3-S3-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=21.2<21.2R3-S5-EVO | 21.2R3-S5-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=21.3<21.3R3-S4-EVO | 21.3R3-S4-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=21.4<21.4R3-EVO | 21.4R3-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=22.1<22.1R3-EVO | 22.1R3-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=22.2<22.2R2-EVO | 22.2R2-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=22.3<22.3R2-EVO | 22.3R2-EVO | advisory ↗ |