QID 44019

Juniper Junos is the network operating system used in Juniper Networks hardware systems.

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause an RPD crash leading to a Denial of Service (DoS).

This issue affects Juniper Networks Junos OS: All versions prior to 18.1R3-S11;
18.2 versions prior to 18.2R3-S6;
18.3 versions prior to 18.3R3-S4;
18.4 versions prior to 18.4R3-S6;
19.1 versions prior to 19.1R3-S4;
19.2 versions prior to 19.2R3-S1;
19.3 versions prior to 19.3R3-S1;
19.4 versions prior to 19.4R3;
20.1 versions prior to 20.1R2;
20.2 versions prior to 20.2R2;
20.3 versions prior to 20.3R1-S1, 20.3R2;
QID detection logic: (Authenticated)
It checks for vulnerable Junos OS version.

Successful exploitation of this vulnerability may allows an unauthenticated attacker with physical access to the device to cause a Denial of Service (DoS).