PT-2017-11404 · Juniper Networks · Junos

Published 2017-10-13 · Updated 2019-10-09 · CVE-2017-10607

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 16.1R1 through 16.1R1-S3

Description The issue is caused by the receipt of a crafted BGP Protocol Data Unit (PDU) sent directly to the router, which can cause the RPD routing process to crash and restart. This can result in an extended denial of service condition due to repeated crashes of the rpd daemon. The issue can only be triggered by a packet sent directly to the IP address of the router.

Recommendations For Juniper Networks Junos OS versions 16.1R1 through 16.1R1-S3, update to Junos OS 16.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-10607

Affected Products

Junos

References · 3

• https://osv.dev/vulnerability/CVE-2017-10607 · Vendor Advisory
• https://kb.juniper.net/JSA10810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10607 · Security Note