https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:56:46 +0000 https://cve.radiocsirt.org/vuln/cve-2024-21596 <p><strong>Affected:</strong> Juniper Networks Junos OS, Juniper Networks Junos OS Evolved</p> <p>A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).</p> <p>If an attacker sends a specific BGP UPDATE message to the device, this will cause a memory overwrite and therefore an RPD crash and restart in the backup Routing Engine (RE). Continued receipt of these packets will cause a sustained Denial of Service (DoS) condition in the backup RE.</p> <p>The primary RE is not impacted by this issue and there is no impact on traffic.</p> <p>This issue only affects devices with NSR enabled.</p> <p>Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability. This issue requires an attacker to have an established BGP session to a system affected by the issue. This issue affects both eBGP and iBGP implementations.</p> <p>This issue affects:</p> <p>Juniper Networks Junos OS</p> <p>* All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S7; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S2; * 22.3 versions earlier than 22.3R3-S1; * 22.4 versions earlier than 22.4R2-S2, 22.4R3; * 23.1 versions earlier than 23.1R2; * 23.2 versions earlier than 23.2R1-S2, 23.2R2.</p> <p>Juniper Networks Junos OS Evolved</p> <p>* All versions earlier than 21.3R3-S5-EVO; * 21.4-EVO versions earlie…</p> <p><strong>Affected:</strong> Juniper Networks Junos OS, Juniper Networks Junos OS Evolved</p> <p>A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).</p> <p>If an attacker sends a specific BGP UPDATE message to the device, this will cause a memory overwrite and therefore an RPD crash and restart in the backup Routing Engine (RE). Continued receipt of these packets will cause a sustained Denial of Service (DoS) condition in the backup RE.</p> <p>The primary RE is not impacted by this issue and there is no impact on traffic.</p> <p>This issue only affects devices with NSR enabled.</p> <p>Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability. This issue requires an attacker to have an established BGP session to a system affected by the issue. This issue affects both eBGP and iBGP implementations.</p> <p>This issue affects:</p> <p>Juniper Networks Junos OS</p> <p>* All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S7; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S2; * 22.3 versions earlier than 22.3R3-S1; * 22.4 versions earlier than 22.4R2-S2, 22.4R3; * 23.1 versions earlier than 23.1R2; * 23.2 versions earlier than 23.2R1-S2, 23.2R2.</p> <p>Juniper Networks Junos OS Evolved</p> <p>* All versions earlier than 21.3R3-S5-EVO; * 21.4-EVO versions earlie…</p> https://cve.radiocsirt.org/vuln/cve-2024-21596