title: Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed
description: An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed. This, in turn, may allow a spoofed advertisement to be accepted or propagated. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R2.
problem types: CWE-358 Improperly Implemented Security Check for Standard
affected:
{
product: Junos OS
vendor: Juniper Networks
versions:
lessThan: 12.3R12-S18, status: affected, version: 12.3, versionType: custom
lessThan: 15.1R7-S9, status: affected, version: 15.1, versionType: custom
lessThan: 17.2R3-S3, status: affected, version: 17.2, versionType: custom
lessThan: 17.3R3-S7, status: affected, version: 17.3, versionType: custom
lessThan: 17.4R2-S9, 17.4R3, status: affected, version: 17.4, versionType: custom
lessThan: 18.1R3-S13, status: affected, version: 18.1, versionType: custom
lessThan: 18.2R3-S3, status: affected, version: 18.2, versionType: custom
lessThan: 18.3R3-S1, status: affected, version: 18.3, versionType: custom
lessThan: 18.4R3, status: affected, version: 18.4, versionType: custom
lessThan: 19.1R2, status: affected, version: 19.1, versionType: custom
lessThan: 19.2R2, status: affected, version: 19.2, versionType: custom
lessThan: 19.3R2, status: affected, version: 19.3, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
version: 3.1
]
exploits: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
solutions: The following software releases have been updated to resolve this specific issue: 12.3R12-S18, 15.1R7-S9, 17.2R3-S3, 17.3R3-S7, 17.4R2-S9, 17.4R3, 18.1R3-S13, 18.2R3-S3, 18.3R3-S1, 18.4R3, 19.1R2, 19.2R2, 19.3R2, 19.4R1, and all subsequent releases.
workarounds: There are no viable workarounds for this issue.