Out-of-Bounds Read in Juniper Junos OS and Junos OS Evolved

Executive Summary

This is an Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent low-privilege attacker to read limited rpd process memory and disrupt an LDP adjacency by sending a specially crafted IPv6 LDP message.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves an out-of-bounds read in the rpd process of Juniper Junos OS and Junos OS Evolved, triggered by IPv6 LDP messages. Detection requires monitoring for unusual LDP adjacency disruptions or memory disclosures. Juniper recommends checking logs for rpd crashes or LDP session resets. Use commands like 'show log messages | match rpd' or 'show ldp session' to inspect LDP adjacency status.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to disclose small amounts of sensitive memory from the rpd process and cause instability in LDP adjacencies, potentially leading to network disruptions or limited information exposure.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly impact compliance with GDPR or HIPAA as it involves an out-of-bounds read in the rpd process of Juniper Networks Junos OS and Junos OS Evolved, which may lead to limited memory disclosure and LDP adjacency disruption. There is no evidence in the provided context that this vulnerability affects data confidentiality, integrity, or availability in a way that would violate these standards.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest security patches from Juniper Networks to update affected Junos OS and Junos OS Evolved versions. Monitor LDP adjacencies for disruptions and inspect IPv6 LDP messages for anomalies.

Useful 0 Not Useful 0