CVE-2017-10607

Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit (PDU) sent directly to the router, which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs, which are transitive in nature, this issue can only be triggered by a packet sent directly to the IP address of the router. Repeated crashes of the rpd daemon can result in an extended denial of service condition. This issue only affects devices running Junos OS 16.1R1 and services releases based off of 16.1R1 (e.g. 16.1R1-S1, 16.1R1-S2, 16.1R1-S3). No prior versions of Junos OS are affected by this vulnerability, and this issue was resolved in Junos OS 16.2 prior to 16.2R1. No other Juniper Networks products or platforms are affected by this issue. This issue was found during internal product security testing.

• https://kb.juniper.net/JSA10810Vendor Advisory
• https://kb.juniper.net/JSA10810Vendor Advisory

Published

Oct 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10601A specific device configuration can result in a commit failu…9.8
• CVE-2017-10602A buffer overflow vulnerability in Junos OS CLI may allow a …7
• CVE-2017-10603An XML injection vulnerability in Junos OS CLI can allow a l…7
• CVE-2017-10604When the device is configured to perform account lockout wit…5.3
• CVE-2017-10605On all vSRX and SRX Series devices, when the DHCP or DHCP re…8.6
• CVE-2017-10606Version 4.40 of the TPM (Trusted Platform Module) firmware o…4.4
• CVE-2017-10608Any Juniper Networks SRX series device with one or more ALGs…7.5
• CVE-2017-1061Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10610On SRX Series devices, a crafted ICMP packet embedded within…7.5
• CVE-2017-10611If extended statistics are enabled via 'set chassis extended…6.5
• CVE-2017-10612A persistent site scripting vulnerability in Juniper Network…8
• CVE-2017-10613A vulnerability in a specific loopback filter action command…5.5