PT-2023-1261 · Juniper Networks · Junos

CVE-2023-22403 · Publicado 2023-01-11 · Atualizado 2023-08-08

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 20.2R3-S7 Junos OS versions 20.4 prior to 20.4R3-S4 Junos OS versions 21.1 prior to 21.1R3-S3 Junos OS versions 21.2 prior to 21.2R3-S1 Junos OS versions 21.3 prior to 21.3R3 Junos OS versions 21.4 prior to 21.4R3 Junos OS versions 22.1 prior to 22.1R2

Description The issue is related to an Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS, allowing a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On QFX10K Series, Inter-Chassis Control Protocol (ICCP) connection flaps and sync issues will be observed due to excessive specific traffic to the local device.

Recommendations For versions prior to 20.2R3-S7, update to 20.2R3-S7 or later. For versions 20.4 prior to 20.4R3-S4, update to 20.4R3-S4 or later. For versions 21.1 prior to 21.1R3-S3, update to 21.1R3-S3 or later. For versions 21.2 prior to 21.2R3-S1, update to 21.2R3-S1 or later. For versions 21.3 prior to 21.3R3, update to 21.3R3 or later. For versions 21.4 prior to 21.4R3, update to 21.4R3 or later. For versions 22.1 prior to 22.1R2, update to 22.1R2 or later.

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

BDU:2023-00524

CVE-2023-22403

Produtos afetados

Junos

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-22403 · Nota de Segurança
• https://kb.juniper.net/JSA70199 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-22403 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-00524 · Nota de Segurança