NULL Pointer Dereference in Juniper Networks Junos OS and Junos OS Evolved

Executive Summary

This is a NULL Pointer Dereference vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the rpd process when handling a malformed PIM Bidir message. An unauthenticated attacker on the same network segment could exploit this to cause a denial-of-service condition.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires monitoring for malformed PIM Bidir messages targeting Juniper Junos OS or Junos OS Evolved systems. Check for crashes or high CPU usage in the rpd process. Use commands like 'show system processes extensive' to monitor rpd, and 'show log messages' for crash logs. Inspect network traffic for unusual PIM protocol activity.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could crash the rpd process on affected Juniper devices, leading to network disruption. Services relying on multicast routing may become unavailable until the device is rebooted or the process is manually restarted.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a denial-of-service condition via malformed PIM Bidir messages, leading to service disruption. Such disruptions may impact availability requirements in GDPR (Article 32) and HIPAA (Security Rule §164.312(a)(2)(ii)), potentially violating compliance if systems fail to maintain timely access to data.

Useful 0 Not Useful 0

Mitigation Strategies

Update Junos OS or Junos OS Evolved to the latest patched version to address the NULL Pointer Dereference vulnerability in the rpd process. Monitor network traffic for malformed PIM Bidir messages as a potential attack vector.

Useful 0 Not Useful 0