attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
juniper junos, Juniper Networks Junos OS, juniper junos_os_evolved, and Juniper Networks Junos OS Evolved
Classified as
CWE-121 (Stack-based Buffer Overflow)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
juniper
junos
Juniper Networks
Junos OS
juniper
junos_os_evolved
Juniper Networks
Junos OS Evolved
Subsystems
General OT
Sectors
Multiple
What to Know
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.
What to Do
Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.