Symptom
A BGP Router or BGP Scanner crash may be seen under a very rare condition where an exported list (path internal structure) is freed prematurely.
A miscrafted BGP update may lead to incorrect parsing of the update
Conditions
All this conditions must be true:
-Soft reconfiguration inbound configured
-A change of inbound policy, creating a new received-only path
-Execute 'clear ip bgp *'
Timing conditon, more likely as more number of paths exists
Workaround
Avoid the confluence of all the conditions at the same time
Further Problem Description