title: Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash
description:
An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).
On all Junos OS and Junos OS Evolved platforms, when NETCONF and gRPC are enabled, and a specific query is executed via Dynamic Rendering (DREND), rpd will crash and restart. Continuous execution of this specific query will cause a sustained Denial of Service (DoS) condition.
This issue affects:
Juniper Networks Junos OS
*  22.2 versions earlier than 22.2R2-S2, 22.2R3;
*  22.3 versions earlier than 22.3R2, 22.3R3.
Juniper Networks Junos OS Evolved
*  22.2 versions earlier than 22.2R2-S2-EVO, 22.2R3-EVO;
*  22.3 versions earlier than 22.3R2-EVO, 22.3R3-EVO.
This issue does not affect Juniper Networks:
Junos OS versions earlier than 22.2R1;
Junos OS Evolved versions earlier than 22.2R1-EVO.
problem types: CWE-754 Improper Check for Unusual or Exceptional Conditions
affected:
{
defaultStatus: unaffected
product: Junos OS
vendor: Juniper Networks
versions:
lessThan: 22.2R2-S2, 22.2R3, status: affected, version: 22.2, versionType: semver
lessThan: 22.3R2, 22.3R3, status: affected, version: 22.3, versionType: semver
}
{
defaultStatus: unaffected
product: Junos OS Evolved
vendor: Juniper Networks
versions:
lessThan: 22.2R2-S2-EVO, 22.2R3-EVO, status: affected, version: 22.2, versionType: semver
lessThan: 22.3R2-EVO, 22.3R3-EVO, status: affected, version: 22.3, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
exploits: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
solutions: The following software releases have been updated to resolve this specific issue.
Junos OS: 22.2R2-S2, 22.2R3, 22.3R2, 22.3R3, 22.4R1, and all subsequent releases.
Junos OS Evolved: 22.2R2-S2-EVO, 22.2R3-EVO, 22.3R2-EVO, 22.3R3-EVO, 22.4R1-EVO, and all subsequent releases.
workarounds: There are no known workarounds for this issue.