CVE-2023-4481 (junos, junos_os_evolved)

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

When certain specific crafted BGP UPDATE messages are received over an established BGP session, one BGP session may be torn down with an UPDATE message error, or the issue may propagate beyond the local system which will remain non-impacted, but may affect one or more remote systems. This …

attacker bgp cve daemon denial of service dos down input input validation juniper juniper networks junos junos os may message messages network networks protocol routing service session unauthenticated update validation vulnerability