Description
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed. Successful exploitation can crash rpd and interrupt routing protocols until the daemon restarts and reconverges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Juniper Networks Junos OS
Default version status: unaffected
0 to < 23.2R2-S7.7affected23.4 to < 23.4R2-S8.13affected24.2 to < 24.2R2-S5.5affected24.4 to < 24.4R2-S5affected25.2 to < 25.2R2-S2affected25.4 to < 25.4R1-S3affected26.2 to < 26.2R1-S2affected
Juniper Networks Junos OS Evolved
Default version status: unaffected
0 to < 23.2R2-S7.7-EVOaffected23.4 to < 23.4R2-S8.11-EVOaffected24.2 to < 24.2R2-S5.6-EVOaffected24.4 to < 24.4R2-S5-EVOaffected25.2 to < 25.2R2-S2-EVOaffected25.4 to < 25.4R1-S3-EVOaffected26.2 to < 26.2R1-S2-EVOaffected23.4X100affected25.2X100 to < 25.2X100-D35-EVOaffected25.4X300 to < 25.4X300-D40-EVOaffected