[nsp-sec] Juniper JSA11024

[Stephane.Dodeller at swisscom.com]

Hi all,

As you may have noticed, Juniper recently published its latest batch of security advisories.

Among them, JSA11024 ( https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11024&actp=SUBSCRIPTION ) impacts quite a big range of installed JunOS Versions, and looks very easy to leverage (remote Routing Daemon crash by sending legitimate BGP Packets).
We are trying to push our consulting engineers by Juniper to give us as many details as possible, but I thought one of you may already have more informations on what is impacted and what can be done to mitigate the issue, until we can upgrade.

Stay safe everyone!

Best regards

Stéphane Dodeller
Swisscom (AS3303) Backbone Engineering and Network Security