CVE-2017-2302

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R6, 15.1 prior to 15.1F2 or 15.1R1, 15.1X49 prior to 15.1X49-D20 where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options, a network based attacker can cause the Junos OS rpd daemon to crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options	12.1X46 prior to 12.1X46-D55; 12.1X47 prior to 12.1X47-D45; 12.3R13 prior to 12.3R13; 12.3X48 prior to 12.3X48-D35; 13.3 prior to 13.3R10; 14.1 prior to 14.1R8; 14.1X53 prior to 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R6; 15.1 prior to 15.1F2 or 15.1R1; 15.1X49 prior to 15.1X49-D20; 16.1 and subsequent releases contain a fix

References

http://www.securityfocus.com/bid/95394Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037595Third Party Advisory, VDB Entry
https://kb.juniper.net/JSA10771Vendor Advisory
http://www.securityfocus.com/bid/95394Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037595Third Party Advisory, VDB Entry
https://kb.juniper.net/JSA10771Vendor Advisory

Timeline

Published: May 30, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-23037.5On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13 CVE-2017-23047.5Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior CVE-2017-23058.8On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admi CVE-2017-23068.8On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admi CVE-2017-23076.1A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may CVE-2017-23086.5An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to r CVE-2017-23095.9On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some CVE-2017-23105.3A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain craft CVE-2017-23115.3On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can e CVE-2017-23126.5On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE (Routing Engin CVE-2017-23137.5Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd CVE-2017-23147.5Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. By continuously sending sp