CVE-2017-2303 : Security Advisory and Response

In Juniper Networks products or platforms running Junos OS, a vulnerability exists where the RPD daemon may crash due to certain RIP advertisements received by the router, potentially leading to a denial of service situation.

Understanding CVE-2017-2303

This CVE affects Juniper Networks products with specific versions of Junos OS where RIP is enabled.

What is CVE-2017-2303?

The vulnerability in Junos OS versions mentioned allows for a denial of service condition due to the RPD daemon crashing when specific RIP advertisements are received.

The Impact of CVE-2017-2303

The vulnerability can result in a denial of service situation, impacting the availability and stability of the affected systems.

Technical Details of CVE-2017-2303

This section provides more technical insights into the CVE.

Vulnerability Description

The vulnerability in Junos OS versions 12.1X46 to 15.1X53, with RIP enabled, can cause the RPD daemon to crash when certain RIP advertisements are processed.

Affected Systems and Versions

Junos OS 12.1X46 to 15.1X53
Versions specified in the JSON data

Exploitation Mechanism

Exploitation involves sending specific RIP advertisements to the router, triggering the RPD daemon crash.

Mitigation and Prevention

Protecting systems from CVE-2017-2303 requires immediate actions and long-term security practices.

Immediate Steps to Take

Disable RIP if not required for network operations
Implement filters to block malicious RIP advertisements
Apply vendor-supplied patches or updates

Long-Term Security Practices

Regularly monitor and update network devices
Conduct security assessments and audits periodically
Stay informed about security advisories from Juniper Networks

Patching and Updates

Juniper Networks released fixes starting from Junos OS version 16.1R1 and subsequent releases
Ensure timely installation of patches and updates to mitigate the vulnerability