PT-2023-3064 · Juniper Networks · Junos Evolved+1

CVE-2023-28981

·

Publicado

2023-04-12

·

Atualizado

2023-05-02

CVSS v3.1

6.5

Média

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 20.3R3-S5 Juniper Networks Junos OS versions prior to 20.4R3-S3 Juniper Networks Junos OS versions prior to 21.1R3-S4 Juniper Networks Junos OS versions prior to 21.2R3 Juniper Networks Junos OS versions prior to 21.3R3 Juniper Networks Junos OS versions prior to 21.4R2 Juniper Networks Junos OS versions prior to 22.1R2 Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S6-EVO Juniper Networks Junos OS Evolved versions prior to 21.3R3-EVO Juniper Networks Junos OS Evolved versions prior to 21.4R2-EVO Juniper Networks Junos OS Evolved versions prior to 22.1R2-EVO
Description An Improper Input Validation issue in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). If the receipt of router advertisements is enabled on an interface and a specifically malformed RA packet is received, memory corruption will happen which leads to an rpd crash.
Recommendations For Juniper Networks Junos OS versions prior to 20.3R3-S5, update to version 20.3R3-S5 or later. For Juniper Networks Junos OS versions prior to 20.4R3-S3, update to version 20.4R3-S3 or later. For Juniper Networks Junos OS versions prior to 21.1R3-S4, update to version 21.1R3-S4 or later. For Juniper Networks Junos OS versions prior to 21.2R3, update to version 21.2R3 or later. For Juniper Networks Junos OS versions prior to 21.3R3, update to version 21.3R3 or later. For Juniper Networks Junos OS versions prior to 21.4R2, update to version 21.4R2 or later. For Juniper Networks Junos OS versions prior to 22.1R2, update to version 22.1R2 or later. For Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions, no specific update is provided. For Juniper Networks Junos OS Evolved versions prior to 20.4R3-S6-EVO, update to version 20.4R3-S6-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 21.3R3-EVO, update to version 21.3R3-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 21.4R2-EVO, update to version 21.4R2-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 22.1R2-EVO, update to version 22.1R2-EVO or later.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2023-03133
CVE-2023-28981

Produtos afetados

Junos
Junos Evolved