Stack-based Buffer Overflow in Juniper Networks Junos OS and Junos OS Evolved

Executive Summary

This vulnerability is a stack-based buffer overflow in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the routing protocol daemon (rpd) and can be triggered by a remote configured BGP peer sending a flow-spec update that is selected for re-advertisement. This may cause an rpd crash or, on Junos OS, potentially allow remote code execution.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring for crashes in the routing protocol daemon (rpd) or unusual BGP flow-spec update activity. Check logs for rpd crashes or unexpected behavior. Use commands like 'show system processes extensive | match rpd' to monitor rpd status and 'show log messages | match rpd' to review rpd-related logs.

Useful 0 Not Useful 0

Impact Analysis

A remote attacker could exploit this flaw to crash the routing protocol daemon, disrupting network operations. On Junos OS, it may lead to remote code execution, allowing the attacker to take control of the affected system. This could result in network outages, unauthorized access, or further compromise of network infrastructure.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows remote code execution via BGP flow-spec updates, which could lead to unauthorized access or data breaches. Such incidents may violate GDPR's data protection requirements or HIPAA's security rules, depending on the affected system's use case.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved security patches from Juniper Networks immediately. Disable BGP flow-spec updates if not required. Monitor rpd logs for crashes or unusual activity. Restrict BGP peer configurations to trusted sources only.

Useful 0 Not Useful 0