Test ID:	1.3.6.1.4.1.25623.1.0.106023
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS BFD Crash Vulnerability
Summary:	Junos OS is prone to a vulnerability in BFD daemon.
Description:	Summary: Junos OS is prone to a vulnerability in BFD daemon. Vulnerability Insight: Receipt of a specially crafted BFD packet can cause the BFD daemon (bfdd) to crash and restart, generating a bfdd core file. The issue can affect all configurations and topologies utilizing BFD including: single-hop and multi-hop BFD, centralized and distributed mode BFD, micro-BFD and LSP BFD. Note that the bfdd crash can be triggered by a crafted BFD packet even if BFD is not enabled on the interface. Vulnerability Impact: Continuous receipt of crafted BFD packets could result in an extended BFD outage, or in extreme cases could lead to remote code execution. Affected Software/OS: Junos OS 12.1, 12.3, 13.2, 13.3, 14.1, 14.2 and 15.1 Solution: New builds of Junos OS software are available from Juniper. As a workaround and BFD is not used at all, disable the BFD daemon by 'set system processes neighbor-liveness disable' CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5362 http://www.securitytracker.com/id/1032844
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.