CVE-2023-0026 (junos, junos_os_evolved)

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a BGP update message is received over an established BGP session, and that message contains a specific, optional transitive attribute, this session will be torn down with an update message error. This issue cannot propagate beyond an affected system as the processing error occurs as soon as …

bgp cve daemon denial of service dos input input validation juniper juniper networks junos junos os message network networks protocol routing service session update validation vulnerability