Test ID:	1.3.6.1.4.1.25623.1.0.105941
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS BGP FlowSpec Denial of Service Vulnerability
Summary:	Junos OS with BGB FlowSpec enabled are vulnerable to a;Denial of Service attack.
Description:	Summary: Junos OS with BGB FlowSpec enabled are vulnerable to a Denial of Service attack. Vulnerability Insight: Receipt of a malformed BGP FlowSpec prefix may cause the router to trigger an assert (programmatic crash) when detecting a certain specification violation. Rather than simply flagging, logging, and/or dropping the packet, the routing process daemon (rpd) will crash and restart. Vulnerability Impact: Exploiting this issue may allow remote attackers to crash and restart the RPD (Routing Protocol Daemon), causing denial-of-service conditions. Affected Software/OS: Junos OS 11.4, 12.1, 12.2, 12.3 and 13.1 Solution: New builds of Junos OS software are available from Juniper. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6386 BugTraq ID: 72067 http://www.securityfocus.com/bid/72067 http://www.securitytracker.com/id/1031548
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.