PT-2023-22061 · Juniper Networks · Junos

CVE-2023-28979 · Publicado 2023-04-17 · Atualizado 2023-05-02

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.3R3-S7 Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S9 Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S7 Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5 Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S4 Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S3 Juniper Networks Junos OS 21.2 versions prior to 21.2R3-S2 Juniper Networks Junos OS 21.3 versions prior to 21.3R3-S1 Juniper Networks Junos OS 21.4 versions prior to 21.4R2-S1, 21.4R3 Juniper Networks Junos OS 22.1 versions prior to 22.1R2 Juniper Networks Junos OS 22.2 versions prior to 22.2R2

Description An Improper Check for Unusual or Exceptional Conditions issue in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario, if an additional integrity check is configured, it will fail to drop specific malformed IPv6 packets, and then these packets will be forwarded to other connected networks.

Recommendations For Juniper Networks Junos OS versions prior to 19.3R3-S7, update to version 19.3R3-S7 or later. For Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S9, update to version 19.4R3-S9 or later. For Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S7, update to version 20.2R3-S7 or later. For Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5, update to version 20.3R3-S5 or later. For Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S4, update to version 20.4R3-S4 or later. For Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S3, update to version 21.1R3-S3 or later. For Juniper Networks Junos OS 21.2 versions prior to 21.2R3-S2, update to version 21.2R3-S2 or later. For Juniper Networks Junos OS 21.3 versions prior to 21.3R3-S1, update to version 21.3R3-S1 or later. For Juniper Networks Junos OS 21.4 versions prior to 21.4R2-S1, 21.4R3, update to version 21.4R2-S1 or later, or apply the 21.4R3 patch. For Juniper Networks Junos OS 22.1 versions prior to 22.1R2, update to version 22.1R2 or later. For Juniper Networks Junos OS 22.2 versions prior to 22.2R2, update to version 22.2R2 or later.

Correção

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-754

Identificadores relacionados

CVE-2023-28979

Produtos afetados

Junos

Referências · 5

• https://t.me/cibsecurity/62329 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-28979 · Aviso do Fabricante
• https://supportportal.juniper.net/JSA70604 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-28979 · Nota de Segurança
• https://t.me/cvenotify/48483 · Publicação no Telegram