Improper Check for Unusual or Exceptional Conditions Vulnerability Leads to Denial of Service (DoS)

CVE-2024-47499

Summary

A vulnerability exists in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved due to improper checks for unusual or exceptional conditions. This flaw can be exploited by unauthenticated, network-based attackers to trigger a Denial of Service (DoS) when BGP Monitoring Protocol (BMP) is configured with rib-in pre-policy monitoring. An attacker could send a specifically malformed AS PATH attribute via an established BGP session, leading to an RPD crash and subsequent restart. Organizations using affected versions of Junos OS and Junos OS Evolved are at risk and should apply remedial measures promptly to enhance their security posture.

References