A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3; 17.2 version 17.2R2 and later versions; 17.2X75 versions prior to 17.2X75-D105, 17.2X75-D110; 17.3 versions prior to 17.3R2-S5, 17.3R3-S6; 17.4 versions prior to 17.4R2-S7, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3-S3; 18.2X75 versions prior to 18.2X75-D410, 18.2X75-D420, 18.2X75-D50, 18.2X75-D60; 18.3 versions prior to 18.3R1-S5, 18.3R2-S2, 18.3R3; 18.4 versions prior to 18.4R2-S2, 18.4R3; 19.1 versions prior to 19.1R1-S2, 19.1R2; 19.2 versions prior to 19.2R1-S4, 19.2R2. This issue does not affect Juniper Networks Junos OS prior to version 16.1R1.
Weakness
If two threads of execution use a resource simultaneously, there exists the possibility that resources may be used while invalid, in turn making the state of execution undefined.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Junos | Juniper | 16.1 (including) | 16.1 (including) |
| Junos | Juniper | 16.1-r1 (including) | 16.1-r1 (including) |
| Junos | Juniper | 16.1-r2 (including) | 16.1-r2 (including) |
| Junos | Juniper | 16.1-r3 (including) | 16.1-r3 (including) |
| Junos | Juniper | 16.1-r3-s10 (including) | 16.1-r3-s10 (including) |
| Junos | Juniper | 16.1-r3-s11 (including) | 16.1-r3-s11 (including) |
| Junos | Juniper | 16.1-r4 (including) | 16.1-r4 (including) |
| Junos | Juniper | 16.1-r4-s12 (including) | 16.1-r4-s12 (including) |
| Junos | Juniper | 16.1-r4-s2 (including) | 16.1-r4-s2 (including) |
| Junos | Juniper | 16.1-r4-s3 (including) | 16.1-r4-s3 (including) |
| Junos | Juniper | 16.1-r4-s4 (including) | 16.1-r4-s4 (including) |
| Junos | Juniper | 16.1-r4-s6 (including) | 16.1-r4-s6 (including) |
| Junos | Juniper | 16.1-r5 (including) | 16.1-r5 (including) |
| Junos | Juniper | 16.1-r5-s4 (including) | 16.1-r5-s4 (including) |
| Junos | Juniper | 16.1-r6-s1 (including) | 16.1-r6-s1 (including) |
| Junos | Juniper | 16.1-r6-s6 (including) | 16.1-r6-s6 (including) |
| Junos | Juniper | 16.1-r7 (including) | 16.1-r7 (including) |
| Junos | Juniper | 16.1-r7-s2 (including) | 16.1-r7-s2 (including) |
| Junos | Juniper | 16.1-r7-s3 (including) | 16.1-r7-s3 (including) |
| Junos | Juniper | 16.1-r7-s4 (including) | 16.1-r7-s4 (including) |
| Junos | Juniper | 16.1-r7-s5 (including) | 16.1-r7-s5 (including) |
| Junos | Juniper | 16.2 (including) | 16.2 (including) |
| Junos | Juniper | 16.2-r1 (including) | 16.2-r1 (including) |
| Junos | Juniper | 16.2-r2 (including) | 16.2-r2 (including) |
| Junos | Juniper | 16.2-r2-s1 (including) | 16.2-r2-s1 (including) |
| Junos | Juniper | 16.2-r2-s10 (including) | 16.2-r2-s10 (including) |
| Junos | Juniper | 16.2-r2-s2 (including) | 16.2-r2-s2 (including) |
| Junos | Juniper | 16.2-r2-s5 (including) | 16.2-r2-s5 (including) |
| Junos | Juniper | 16.2-r2-s6 (including) | 16.2-r2-s6 (including) |
| Junos | Juniper | 16.2-r2-s7 (including) | 16.2-r2-s7 (including) |
| Junos | Juniper | 16.2-r2-s8 (including) | 16.2-r2-s8 (including) |
| Junos | Juniper | 16.2-r2-s9 (including) | 16.2-r2-s9 (including) |
| Junos | Juniper | 17.1 (including) | 17.1 (including) |
| Junos | Juniper | 17.1-r1 (including) | 17.1-r1 (including) |
| Junos | Juniper | 17.1-r2 (including) | 17.1-r2 (including) |
| Junos | Juniper | 17.1-r2-s1 (including) | 17.1-r2-s1 (including) |
| Junos | Juniper | 17.1-r2-s10 (including) | 17.1-r2-s10 (including) |
| Junos | Juniper | 17.1-r2-s2 (including) | 17.1-r2-s2 (including) |
| Junos | Juniper | 17.1-r2-s3 (including) | 17.1-r2-s3 (including) |
| Junos | Juniper | 17.1-r2-s4 (including) | 17.1-r2-s4 (including) |
| Junos | Juniper | 17.1-r2-s5 (including) | 17.1-r2-s5 (including) |
| Junos | Juniper | 17.1-r2-s6 (including) | 17.1-r2-s6 (including) |
| Junos | Juniper | 17.1-r2-s7 (including) | 17.1-r2-s7 (including) |
| Junos | Juniper | 17.1-r2-s8 (including) | 17.1-r2-s8 (including) |
| Junos | Juniper | 17.1-r2-s9 (including) | 17.1-r2-s9 (including) |
| Junos | Juniper | 17.1-r3 (including) | 17.1-r3 (including) |
| Junos | Juniper | 17.2 (including) | 17.2 (including) |
| Junos | Juniper | 17.2-r1 (including) | 17.2-r1 (including) |
| Junos | Juniper | 17.2-r1-s1 (including) | 17.2-r1-s1 (including) |
| Junos | Juniper | 17.2-r1-s2 (including) | 17.2-r1-s2 (including) |
| Junos | Juniper | 17.2-r1-s3 (including) | 17.2-r1-s3 (including) |
| Junos | Juniper | 17.2-r1-s4 (including) | 17.2-r1-s4 (including) |
| Junos | Juniper | 17.2-r1-s5 (including) | 17.2-r1-s5 (including) |
| Junos | Juniper | 17.2-r1-s7 (including) | 17.2-r1-s7 (including) |
| Junos | Juniper | 17.2-r1-s8 (including) | 17.2-r1-s8 (including) |
| Junos | Juniper | 17.2-r2 (including) | 17.2-r2 (including) |
| Junos | Juniper | 17.2-r2-s6 (including) | 17.2-r2-s6 (including) |
| Junos | Juniper | 17.2-r2-s7 (including) | 17.2-r2-s7 (including) |
| Junos | Juniper | 17.2-r3 (including) | 17.2-r3 (including) |
| Junos | Juniper | 17.2-r3-s1 (including) | 17.2-r3-s1 (including) |
| Junos | Juniper | 17.2-r3-s2 (including) | 17.2-r3-s2 (including) |
| Junos | Juniper | 17.2x75 (including) | 17.2x75 (including) |
| Junos | Juniper | 17.2x75-d102 (including) | 17.2x75-d102 (including) |
| Junos | Juniper | 17.2x75-d50 (including) | 17.2x75-d50 (including) |
| Junos | Juniper | 17.2x75-d70 (including) | 17.2x75-d70 (including) |
| Junos | Juniper | 17.2x75-d92 (including) | 17.2x75-d92 (including) |
| Junos | Juniper | 17.3 (including) | 17.3 (including) |
| Junos | Juniper | 17.3-r1-s1 (including) | 17.3-r1-s1 (including) |
| Junos | Juniper | 17.3-r2 (including) | 17.3-r2 (including) |
| Junos | Juniper | 17.3-r2-s1 (including) | 17.3-r2-s1 (including) |
| Junos | Juniper | 17.3-r2-s2 (including) | 17.3-r2-s2 (including) |
| Junos | Juniper | 17.3-r2-s3 (including) | 17.3-r2-s3 (including) |
| Junos | Juniper | 17.3-r2-s4 (including) | 17.3-r2-s4 (including) |
| Junos | Juniper | 17.3-r3 (including) | 17.3-r3 (including) |
| Junos | Juniper | 17.3-r3-s1 (including) | 17.3-r3-s1 (including) |
| Junos | Juniper | 17.3-r3-s2 (including) | 17.3-r3-s2 (including) |
| Junos | Juniper | 17.3-r3-s3 (including) | 17.3-r3-s3 (including) |
| Junos | Juniper | 17.3-r3-s4 (including) | 17.3-r3-s4 (including) |
| Junos | Juniper | 17.3-r3-s5 (including) | 17.3-r3-s5 (including) |
| Junos | Juniper | 17.4 (including) | 17.4 (including) |
| Junos | Juniper | 17.4-r1 (including) | 17.4-r1 (including) |
| Junos | Juniper | 17.4-r1-s1 (including) | 17.4-r1-s1 (including) |
| Junos | Juniper | 17.4-r1-s2 (including) | 17.4-r1-s2 (including) |
| Junos | Juniper | 17.4-r1-s4 (including) | 17.4-r1-s4 (including) |
| Junos | Juniper | 17.4-r1-s5 (including) | 17.4-r1-s5 (including) |
| Junos | Juniper | 17.4-r1-s6 (including) | 17.4-r1-s6 (including) |
| Junos | Juniper | 17.4-r1-s7 (including) | 17.4-r1-s7 (including) |
| Junos | Juniper | 17.4-r2 (including) | 17.4-r2 (including) |
| Junos | Juniper | 17.4-r2-s1 (including) | 17.4-r2-s1 (including) |
| Junos | Juniper | 17.4-r2-s2 (including) | 17.4-r2-s2 (including) |
| Junos | Juniper | 17.4-r2-s3 (including) | 17.4-r2-s3 (including) |
| Junos | Juniper | 17.4-r2-s4 (including) | 17.4-r2-s4 (including) |
| Junos | Juniper | 17.4-r2-s5 (including) | 17.4-r2-s5 (including) |
| Junos | Juniper | 17.4-r2-s6 (including) | 17.4-r2-s6 (including) |
| Junos | Juniper | 18.1 (including) | 18.1 (including) |
| Junos | Juniper | 18.1-r2 (including) | 18.1-r2 (including) |
| Junos | Juniper | 18.1-r2-s1 (including) | 18.1-r2-s1 (including) |
| Junos | Juniper | 18.1-r2-s2 (including) | 18.1-r2-s2 (including) |
| Junos | Juniper | 18.1-r2-s4 (including) | 18.1-r2-s4 (including) |
| Junos | Juniper | 18.1-r3 (including) | 18.1-r3 (including) |
| Junos | Juniper | 18.1-r3-s1 (including) | 18.1-r3-s1 (including) |
| Junos | Juniper | 18.1-r3-s2 (including) | 18.1-r3-s2 (including) |
| Junos | Juniper | 18.1-r3-s3 (including) | 18.1-r3-s3 (including) |
| Junos | Juniper | 18.1-r3-s4 (including) | 18.1-r3-s4 (including) |
| Junos | Juniper | 18.1-r3-s6 (including) | 18.1-r3-s6 (including) |
| Junos | Juniper | 18.1-r3-s7 (including) | 18.1-r3-s7 (including) |
| Junos | Juniper | 18.2 (including) | 18.2 (including) |
| Junos | Juniper | 18.2-r1 (including) | 18.2-r1 (including) |
| Junos | Juniper | 18.2-r1-s3 (including) | 18.2-r1-s3 (including) |
| Junos | Juniper | 18.2-r1-s5 (including) | 18.2-r1-s5 (including) |
| Junos | Juniper | 18.2-r2-s1 (including) | 18.2-r2-s1 (including) |
| Junos | Juniper | 18.2-r2-s2 (including) | 18.2-r2-s2 (including) |
| Junos | Juniper | 18.2-r2-s3 (including) | 18.2-r2-s3 (including) |
| Junos | Juniper | 18.2-r2-s4 (including) | 18.2-r2-s4 (including) |
| Junos | Juniper | 18.2-r2-s5 (including) | 18.2-r2-s5 (including) |
| Junos | Juniper | 18.2-r2-s6 (including) | 18.2-r2-s6 (including) |
| Junos | Juniper | 18.2-r3 (including) | 18.2-r3 (including) |
| Junos | Juniper | 18.2-r3-s1 (including) | 18.2-r3-s1 (including) |
| Junos | Juniper | 18.2-r3-s2 (including) | 18.2-r3-s2 (including) |
| Junos | Juniper | 18.2x75 (including) | 18.2x75 (including) |
| Junos | Juniper | 18.2x75-d20 (including) | 18.2x75-d20 (including) |
| Junos | Juniper | 18.2x75-d30 (including) | 18.2x75-d30 (including) |
| Junos | Juniper | 18.2x75-d40 (including) | 18.2x75-d40 (including) |
| Junos | Juniper | 18.3 (including) | 18.3 (including) |
| Junos | Juniper | 18.3-r1 (including) | 18.3-r1 (including) |
| Junos | Juniper | 18.3-r1-s1 (including) | 18.3-r1-s1 (including) |
| Junos | Juniper | 18.3-r1-s2 (including) | 18.3-r1-s2 (including) |
| Junos | Juniper | 18.3-r1-s3 (including) | 18.3-r1-s3 (including) |
| Junos | Juniper | 18.3-r1-s4 (including) | 18.3-r1-s4 (including) |
| Junos | Juniper | 18.3-r2 (including) | 18.3-r2 (including) |
| Junos | Juniper | 18.3-r2-s1 (including) | 18.3-r2-s1 (including) |
| Junos | Juniper | 18.4 (including) | 18.4 (including) |
| Junos | Juniper | 18.4-r1 (including) | 18.4-r1 (including) |
| Junos | Juniper | 18.4-r1-s1 (including) | 18.4-r1-s1 (including) |
| Junos | Juniper | 18.4-r1-s2 (including) | 18.4-r1-s2 (including) |
| Junos | Juniper | 18.4-r1-s5 (including) | 18.4-r1-s5 (including) |
| Junos | Juniper | 18.4-r2 (including) | 18.4-r2 (including) |
| Junos | Juniper | 18.4-r2-s1 (including) | 18.4-r2-s1 (including) |
| Junos | Juniper | 19.1 (including) | 19.1 (including) |
| Junos | Juniper | 19.1-r1 (including) | 19.1-r1 (including) |
| Junos | Juniper | 19.1-r1-s1 (including) | 19.1-r1-s1 (including) |
| Junos | Juniper | 19.2 (including) | 19.2 (including) |
| Junos | Juniper | 19.2-r1 (including) | 19.2-r1 (including) |
| Junos | Juniper | 19.2-r1-s1 (including) | 19.2-r1-s1 (including) |
| Junos | Juniper | 19.2-r1-s2 (including) | 19.2-r1-s2 (including) |
| Junos | Juniper | 19.2-r1-s3 (including) | 19.2-r1-s3 (including) |