Database/Firmware, BMC & network fabric
Juniper Junos OS / Junos OS Evolved (rpd, BGP UPDATE): A crafted BGP UPDATE crashes the routing protocol daemon. In a
Impact
A crafted BGP UPDATE crashes the routing protocol daemon. In a BGP-underlay leaf/spine the rpd going down is the rack losing reachability; because BGP UPDATEs propagate, a single malicious or malformed announcement can ripple to every device that accepts it, which is how a one-switch bug becomes a fabric-wide outage.
Who can reach it
Unauthenticated attacker able to get a crafted UPDATE into the BGP mesh — either as a peer, or upstream of one, since the message is forwarded along.
What to do
Junos/Junos Evolved upgrade plus reboot, staged so ECMP paths are never both down. Interim: BGP UPDATE filtering and strict inbound policy at the fabric edge, plus bgp-error-tolerance style handling where the release supports it — live config changes.
References
Related entries
- EDK II OvmfPkg (X86QemuLoadImageLib, QemuLoadKernelImage direct-boot path): With Secure Boot on, a kernelCVE-2025-2296 · EDK II OvmfPkg (X86QemuLoadImageLib, QemuLoadKernelImage direct-boot path)Unscored
- Dell Enterprise SONiC (sensitive information in log files): Sensitive information is written into log filesCVE-2025-23374 · Dell Enterprise SONiC (sensitive information in log files)Unscored
- Arista EOS (ingress ACL enforcement on ethernet/LAG): With IPv4 ingress, MAC ingress, or IPv6 standard ingress ACLsCVE-2025-2826 · Arista EOS (ingress ACL enforcement on ethernet/LAG)Unscored
- Linux kernel mlxbf-bootctl (BlueField secure boot fuse state): The BlueField boot-control driver mishandles the sysfsCVE-2025-37866 · Linux kernel mlxbf-bootctl (BlueField secure boot fuse state)Unscored
- libtpms (CryptHmacSign, vTPM): Out-of-bounds read when signKey and signScheme are mismatched, aborting the vTPMCVE-2025-49133 · libtpms (CryptHmacSign, vTPM)Unscored
- Juniper Junos OS / Junos OS Evolved (rpd BGP session handling): A genuine, valid BGP UPDATE message resets a live BGPCVE-2025-52953 · Juniper Junos OS / Junos OS Evolved (rpd BGP session handling)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.