Test ID:	1.3.6.1.4.1.25623.1.0.106061
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS LDP DoS Vulnerability
Summary:	Junos OS is prone to a Denial of Service vulnerability with;LDP enabled.
Description:	Summary: Junos OS is prone to a Denial of Service vulnerability with LDP enabled. Vulnerability Insight: If LDP is enabled via the 'protocols ldp' configuration option on a device running Junos OS, receipt of a crafted LDP packet may cause the RPD routing process to crash and restart. The interface on which the packet arrives does not need to have LDP enabled. As long as one interface to the peer has LDP enabled, the packet will be sent to Routing Engine for further processing, exposing the router to a denial of service (RPD crash). Vulnerability Impact: An attacker can cause a denial of service condition by crashing the RPD routing process. Affected Software/OS: Junos OS 13.2, 13.3, 14.1, 14.2 and 15.1 Solution: New builds of Junos OS software are available from Juniper. As a workaround disable LDP. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1257 http://www.securitytracker.com/id/1035117
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.