Juniper Networks Junos OS and Junos OS Evolved Double-Free Vulnerability in BGP Path Attribute Handling Leading to Denial-of-Service

A double-free vulnerability has been identified in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This vulnerability allows an attacker to send a malformed BGP Path attribute update, which is logged before the memory is freed. The improper handling of memory allocation and deallocation causes rpd to crash, resulting in a denial-of-service condition. This issue affects Junos OS versions from 22.4 prior to 22.4R3-S4 and Junos OS Evolved versions from 22.4 prior to 22.4R3-S4-EVO.

Impact

Exploitation of this vulnerability causes the routing process daemon (rpd) to crash, leading to a denial-of-service condition.