Input validation error in Junos OS and Junos OS Evolved - CVE-2023-4481
Published: August 29, 2023 / Updated: October 2, 2023
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the Routing Protocol Daemon (rpd). A remote attacker can send specially crafted BGP UPDATE messages over an established BGP session and perform a denial of service (DoS) attack.
This issue affects eBGP and iBGP, in both IPv4 and IPv6 implementations but requires a remote attacker to have at least one established BGP session.
Affected software
Junos OS Evolved
How to mitigate CVE-2023-4481
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
The vendor is preparing to resolve the vulnerability in the upcoming releases:
Junos OS: 23.4R1*, and all subsequent releases.
Junos OS Evolved: 23.4R1-EVO*, and all subsequent releases.