CVE-2017-10618: Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes

First published: Fri Oct 13 2017(Updated: )

When the 'bgp-error-tolerance' feature â€" designed to help mitigate remote session resets from malformed path attributes â€" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled that do not have 'bgp-error-tolerance' configured are not vulnerable to this issue. Affected releases are Juniper Networks Junos OS 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F5-S8, 15.1F6-S7, 15.1R5-S6, 15.1R6-S2, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R5; 16.2 prior to 16.2R1-S5, 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S2, 17.2R2; 17.2X75 prior to 17.2X75-D50. No other Juniper Networks products or platforms are affected by this issue.

Credit: sirt@juniper.net

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/author
• agent/references
• agent/title
• agent/last-modified-date
• agent/severity
• agent/tags
• agent/description
• agent/event
• agent/first-publish-date
• vendor/juniper
• canonical/juniper junos
• version/juniper junos/13.3
• version/juniper junos/13.3-r10
• version/juniper junos/13.3-r2
• version/juniper junos/13.3-r3
• version/juniper junos/13.3-r4
• version/juniper junos/13.3-r5
• version/juniper junos/13.3-r6
• version/juniper junos/13.3-r7
• version/juniper junos/13.3-r8
• version/juniper junos/13.3-r9
• version/juniper junos/14.1
• version/juniper junos/14.1-r1
• version/juniper junos/14.1-r2
• version/juniper junos/14.1-r3
• version/juniper junos/14.1-r4
• version/juniper junos/14.1-r5
• version/juniper junos/14.1-r6
• version/juniper junos/14.1-r7
• version/juniper junos/14.1-r8
• version/juniper junos/14.1-r9
• version/juniper junos/14.1x50
• version/juniper junos/14.1x50-d60
• version/juniper junos/14.1x53
• version/juniper junos/14.1x53-d10
• version/juniper junos/14.1x53-d15
• version/juniper junos/14.1x53-d16
• version/juniper junos/14.1x53-d25
• version/juniper junos/14.1x53-d26
• version/juniper junos/14.1x53-d27
• version/juniper junos/14.1x53-d30
• version/juniper junos/14.1x53-d35
• version/juniper junos/14.1x53-d40
• version/juniper junos/14.1x53-d42
• version/juniper junos/14.1x53-d43
• version/juniper junos/14.1x53-d44
• version/juniper junos/14.1x53-d50
• version/juniper junos/14.2
• version/juniper junos/14.2-r1
• version/juniper junos/14.2-r2
• version/juniper junos/14.2-r3
• version/juniper junos/14.2-r4
• version/juniper junos/14.2-r5
• version/juniper junos/14.2-r6
• version/juniper junos/14.2-r7
• version/juniper junos/14.2-r8
• version/juniper junos/15.1
• version/juniper junos/15.1-f1
• version/juniper junos/15.1-f2
• version/juniper junos/15.1-f2-s1
• version/juniper junos/15.1-f2-s2
• version/juniper junos/15.1-f2-s3
• version/juniper junos/15.1-f2-s4
• version/juniper junos/15.1-f3
• version/juniper junos/15.1-f4
• version/juniper junos/15.1-f5
• version/juniper junos/15.1-f6-s7
• version/juniper junos/15.1-r1
• version/juniper junos/15.1-r2
• version/juniper junos/15.1-r3
• version/juniper junos/15.1-r4
• version/juniper junos/15.1-r5
• version/juniper junos/15.1-r5-s6
• version/juniper junos/15.1-r6-s2
• version/juniper junos/15.1-r7
• version/juniper junos/15.1x49
• version/juniper junos/15.1x49-d10
• version/juniper junos/15.1x49-d20
• version/juniper junos/15.1x49-d30
• version/juniper junos/15.1x49-d35
• version/juniper junos/15.1x49-d40
• version/juniper junos/15.1x49-d45
• version/juniper junos/15.1x49-d50
• version/juniper junos/15.1x49-d55
• version/juniper junos/15.1x49-d60
• version/juniper junos/15.1x49-d65
• version/juniper junos/15.1x49-d70
• version/juniper junos/15.1x49-d75
• version/juniper junos/15.1x49-d80
• version/juniper junos/15.1x49-d90
• version/juniper junos/15.1x53
• version/juniper junos/15.1x53-d10
• version/juniper junos/15.1x53-d20
• version/juniper junos/15.1x53-d21
• version/juniper junos/15.1x53-d25
• version/juniper junos/15.1x53-d30
• version/juniper junos/15.1x53-d32
• version/juniper junos/15.1x53-d33
• version/juniper junos/15.1x53-d34
• version/juniper junos/15.1x53-d50
• version/juniper junos/15.1x53-d51
• version/juniper junos/15.1x53-d52
• version/juniper junos/15.1x53-d55
• version/juniper junos/15.1x53-d57
• version/juniper junos/15.1x53-d60
• version/juniper junos/15.1x53-d61
• version/juniper junos/15.1x53-d62
• version/juniper junos/15.1x53-d63
• version/juniper junos/15.1x53-d70
• version/juniper junos/16.1
• version/juniper junos/16.1-r1
• version/juniper junos/16.1-r2
• version/juniper junos/16.1-r3
• version/juniper junos/16.1-r4-s3
• version/juniper junos/16.1-r5
• version/juniper junos/16.2
• version/juniper junos/16.2-r1
• version/juniper junos/16.2-r2
• version/juniper junos/17.1
• version/juniper junos/17.1-r1
• version/juniper junos/17.1-r2
• version/juniper junos/17.2
• version/juniper junos/17.2-r1
• version/juniper junos/17.2-r2
• version/juniper junos/17.2x75