7.5

CVE-2017-2313: juniper networks junos os with bgp enabled Improper Input Validation

CVSS: 7.5v3.0HighModified
Published 24-04-2017Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2017-2313 is a high (CVSS 7.5) Improper Input Validation vulnerability in juniper networks junos os with bgp enabled. EPSS estimates a 2.27% chance of exploitation in the next 30 days, higher than 82.7% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.0 (NVD)
EPSS score
2.27%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 24-04-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS versions are: 15.1 prior to 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D78, 15.1X49-D80; 15.1X53 prior to 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 prior to 16.1R3-S3, 16.1R4; 16.2 prior to 16.2R1-S3, 16.2R2; Releases prior to Junos OS 15.1 are unaffected by this vulnerability. 17.1R1, 17.2R1, and all subsequent releases have a resolution for this vulnerability.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

2.27%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

0.00 pp

From 2.27% on 20-09-2026

20-09-202620-10-2026
EPSS score
2.27%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Juniper1 product
  • junos15.1:f1 | 15.1:f2 | 15.1:f5 | 15.1:f6 | 15.1:f7 | 15.1:r4 | 15.1:r5 | 15.1:r6 | 15.1x49:d10 | 15.1x49:d20 | 15.1x49:d30 | 15.1x49:d35 | 15.1x49:d40 | 15.1x49:d45 | 15.1x49:d50 | 15.1x49:d60 | 15.1x49:d65 | 15.1x49:d70 | 15.1x49:d75 | 15.1x49:d80 | 15.1x53:d10 | 15.1x53:d20 | 15.1x53:d21 | 15.1x53:d210 | 15.1x53:d30 | 15.1x53:d32 | 15.1x53:d33 | 15.1x53:d34 | 15.1x53:d60 | 15.1x53:d61 | 15.1x53:d62 | 15.1x53:d63 | 15.1x53:d70 | 16.1:r1 | 16.1:r2 | 16.1:r3 | 16.1:r4 | 16.2:r1 | 16.2:r2
Juniper networks1 product
  • junos os with bgp enabled15.1 prior to 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6 | 15.1X49 prior to 15.1X49-D78, 15.1X49-D80 | 15.1X53 prior to 15.1X53-D230, 15.1X53-D63, 15.1X53-D70 | 16.1 prior to 16.1R3-S3, 16.1R4 | 16.2 prior to 16.2R1-S3, 16.2R2 | Releases prior to Junos OS 15.1 are unaffected by this vulnerability. | 17.1R1, 17.2R1, and all subsequent releases have a resolution for this vulnerability

2 vendors · 2 products

References

3 links