Summary
Extreme Networks considers this as an RFC compliance check as this scenario is well described within the RFCs. Extreme generally implements RFC 4271 and not RFC 7606. Per RFC 4271, tearing down a BGP session is the required response to a malformed attribute. In some cases, this is the desired action, depending on the BGP operator's decision and the defensive posture they wish to maintain. This concept is long accepted and well understood, as RFC 7606 introduces alternatives to tearing down BGP sessions when presented with malformed attributes. How a BGP operator wants their network to respond is based on RFC requirements.
Repair Recommendations
None
Please see the full Security Advisory article here for more details and updated information.
