Improper Handling of Exceptional Conditions Vulnerability Leads to Denial of Service (DoS)

CVE-2024-39552

Summary

An Improper Handling of Exceptional Conditions vulnerability exists in the routing protocol daemon (RPD) of Junos OS and Junos OS Evolved from Juniper Networks. This flaw allows unauthenticated attackers to remotely manipulate the RPD process through the transmission of malformed BGP UPDATE packets over an established BGP session. Upon receiving a malformed packet, the RPD process crashes and restarts, leading to continuous denial of service for affected devices. The vulnerability impacts both eBGP and iBGP implementations across IPv4 and IPv6, necessitating an established session for exploitation.

References