Test ID:	1.3.6.1.4.1.25623.1.0.103969
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS Oversized BGP UPDATE DoS Vulnerability
Summary:	Denial of Service vulnerability in routing daemon from oversized;BGP UPDATE message.
Description:	Summary: Denial of Service vulnerability in routing daemon from oversized BGP UPDATE message. Vulnerability Insight: A large BGP UPDATE message which immediately triggers a withdraw message to be sent, as demonstrated by a long AS_PATH and a large number of BGP Communities, cause the routing daemon to crash. This vulnerability can be triggered in both IPv4 and IPv6 environments. Vulnerability Impact: Remote attackers can cause a denial of service condition on the device. Affected Software/OS: Junos OS i10.4, 11.4, 12.1, 12.2, 12.3, 13.1, 13.2 Solution: New builds of Junos OS software are available from Juniper. For a workaround restrict received communities and/or create an import policy to drop updates with AS_PATH longer than a specified number. See security bulletin from Juniper for further details. CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0616 BugTraq ID: 64766 http://www.securityfocus.com/bid/64766 http://osvdb.org/101868 http://www.securitytracker.com/id/1029582
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.