Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This vulnerability allows an unauthenticated, network-based attacker to cause a crash and restart of the rpd process. The issue arises when an affected system receives a specific BGP EVPN update message over an established BGP session. Notably, a BGP EVPN configuration is not required for the vulnerability to be exploited; however, the vulnerable device must be configured to receive BGP EVPN updates from peers. This vulnerability impacts both iBGP and eBGP, over IPv4 and IPv6.

Impact

Exploitation of this vulnerability leads to a crash of the routing protocol daemon (rpd) process, causing a temporary disruption in routing functions until the process restarts.