NULL Pointer Dereference in Juniper Networks Junos OS and Junos OS Evolved

Executive Summary

This is a NULL Pointer Dereference vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the rpd process and can be triggered by a malformed RSVP Path message sent over an EVPL LMP control channel. This causes a denial of service by crashing the rpd process.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring for malformed RSVP Path messages on EVPL LMP control channels. Check Juniper device logs for rpd process crashes or errors related to RSVP handling. Use commands like 'show log messages | match rpd' or 'show system processes extensive' to identify crashes. Monitor network traffic for unusual RSVP message patterns.

Useful 0 Not Useful 0

Impact Analysis

An adjacent attacker could exploit this to cause a denial of service, disrupting network services that rely on the rpd process. This may lead to network outages or degraded performance for affected Juniper devices.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a denial of service via a malformed RSVP Path message, which could disrupt network services. Such disruptions may impact compliance with standards requiring availability of systems, such as GDPR (data processing continuity) and HIPAA (healthcare service reliability).

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest security patches from Juniper Networks to address the NULL Pointer Dereference vulnerability in the rpd process. Monitor network traffic for malformed RSVP Path messages on EVPL LMP control channels and block suspicious traffic at the perimeter.

Useful 0 Not Useful 0