CVE-2017-2302

highpriority · track · 31EPSS 0.021 · 82 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.13% (82nd) EPSS

CVSS 7.8 · high

Is it mine?

33 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R6, 15.1 prior to 15.1F2 or 15.1R1, 15.1X49 prior to 15.1X49-D20 where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options, a network based attacker can cause the Junos OS rpd daemon to crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.8

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 10 · impact 6.9

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Csecondary · FSTEC (BDU) RU

v3.06.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-19US

affected products (33)

Products and version ranges known to be affected.

Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 14.1X55 prior to 14.1X55-D35enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 12.1X46 prior to 12.1X46-D55enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 12.3R13 prior to 12.3R13enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 12.1X47 prior to 12.1X47-D45enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 14.1 prior to 14.1R8enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 15.1 prior to 15.1F2 or 15.1R1enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 14.1X53 prior to 14.1X53-D40enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 16.1 and subsequent releases contain a fixenisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 12.3X48 prior to 12.3X48-D35enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 15.1X49 prior to 15.1X49-D20enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 14.2 prior to 14.2R6enisa_euvdEU
Juniper Networks Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options≤ 13.3 prior to 13.3R10enisa_euvdEU
Juniper Networks Inc. JunOS≤ 15.1x49:d15fstec_bduRU
Juniper Networks Inc. JunOS≤ 15.1r1fstec_bduRU
Juniper Networks Inc. JunOS≤ 14.2r5fstec_bduRU
Juniper Networks Inc. JunOS≤ 14.1x53:d35fstec_bduRU
Juniper Networks Inc. JunOS≤ 12.3x48:d30fstec_bduRU
Juniper Networks Inc. JunOS≤ 12.1x47:d40fstec_bduRU
Juniper Networks Inc. JunOS≤ 12.1x46:d50fstec_bduRU
Juniper Networks Inc. JunOS≤ 14.1x55:d30fstec_bduRU

showing 20 of 33

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2017-05-30modified 2026-06-17

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan