{"Improper Handling of Exceptional Conditions leads to Denial of Service (DoS)","Juniper Networks Junos OS and Junos OS Evolved affected by DoS vulnerability"}

CVE-2024-47491

Summary

A vulnerability exists in Juniper Networks' Junos OS and Junos OS Evolved due to improper handling of exceptional conditions within the Routing Protocol Daemon (rpd). This flaw can be exploited by a network-based, unauthenticated attacker sending a specially crafted BGP UPDATE with malformed path attributes. When triggered, this vulnerability causes the Routing Protocol Daemon to crash and subsequently restart, leading to a sustained Denial of Service (DoS) condition. Both 32-bit and 64-bit systems are susceptible to this issue, with a notably lower occurrence on 64-bit systems. Users can verify their system architecture using the 'show version detail' command.

References