Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

CVE-2023-4481

What is CVE-2023-4481?

An improper input validation vulnerability exists in the Routing Protocol Daemon (rpd) of Junos OS and Junos OS Evolved. An unauthenticated attacker can exploit this vulnerability by sending specifically crafted BGP UPDATE messages over an established BGP session, potentially causing a Denial of Service (DoS). This attack can lead to the tear down of BGP sessions, which could affect both eBGP and iBGP implementations in IPv4 and IPv6. The harmful UPDATE messages can propagate through unaffected systems, resulting in sustained service disruption for targeted devices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References