Test ID:	1.3.6.1.4.1.25623.1.0.106507
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS RPD DoS Vulnerability
Summary:	Junos OS is prone to a denial of service vulnerability in RPD.
Description:	Summary: Junos OS is prone to a denial of service vulnerability in RPD. Vulnerability Insight: On Junos OS devices where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options, a network based attacker can cause the Junos OS rpd daemon to crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. Junos OS devices that do not have the BGP add-path feature enabled are not affected by this issue. Junos OS devices that only have the 'receive' option with BGP add-path feature enabled are not affected by this issue. Vulnerability Impact: An attacker may cause a denial of service condition. Affected Software/OS: Junos OS 12.1, 12.3, 13.3, 14.1, 14.2 and 15.1. Solution: New builds of Junos OS software are available from Juniper. As a workaround disable the BGP add-path feature completely or disable the 'send' option of BGP add-path. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2302 BugTraq ID: 95394 http://www.securityfocus.com/bid/95394 http://www.securitytracker.com/id/1037595
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.