NVD

Id
86454  
Name
CVE-2017-2302  
Description
On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R6, 15.1 prior to 15.1F2 or 15.1R1, 15.1X49 prior to 15.1X49-D20 where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options, a network based attacker can cause the Junos OS rpd daemon to crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-06-17  
Published
2017-05-30  
Modified Date
2017-06-12  
Seq
2017-2302  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419662 86454 CVE-2017-7859 97663  View
419663 86454 CVE-2017-7859 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=713  View
419664 86454 CVE-2017-7859 97663  View
419665 86454 CVE-2017-7859 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=713  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68375 JVNDB-2017-004632 Juniper Networks 製品およびプラットフォーム上で稼動する Junos OS におけるデータ処理に関する脆弱性 Juniper Networks 製品およびプラットフォーム上で稼動する Junos OS には、BGP add-path 機能が 'send' オプション、または 'send' および 'receive' オプションの両方を付けて有効となっている場合、データ処理に関する脆弱性が存在します。 CVE-2017-2302 0 CVE-2017-2302 86454 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004632.html 2017-01-11 2017-07-03 View