PT-2023-1289 · Juniper Networks · Junos Evolved+1

Published

2023-01-11

·

Updated

2023-01-20

·

CVE-2023-22407

CVSS v3.1

6.5

Medium

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.4R2-S7 Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S2 Juniper Networks Junos OS versions 19.2 prior to 19.2R3 Juniper Networks Junos OS versions 19.3 prior to 19.3R3 Juniper Networks Junos OS versions 19.4 prior to 19.4R3 Juniper Networks Junos OS versions 20.1 prior to 20.1R2 Juniper Networks Junos OS versions 20.2 prior to 20.2R2 Juniper Networks Junos OS Evolved versions prior to 19.2R3-EVO Juniper Networks Junos OS Evolved versions 19.3 prior to 19.3R3-EVO Juniper Networks Junos OS Evolved versions 19.4 prior to 19.4R3-EVO Juniper Networks Junos OS Evolved versions 20.1 prior to 20.1R3-EVO Juniper Networks Junos OS Evolved versions 20.2 prior to 20.2R2-EVO
Description An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected router.
Recommendations For Juniper Networks Junos OS versions prior to 18.4R2-S7, update to version 18.4R2-S7 or later. For Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S2, update to version 19.1R3-S2 or later. For Juniper Networks Junos OS versions 19.2 prior to 19.2R3, update to version 19.2R3 or later. For Juniper Networks Junos OS versions 19.3 prior to 19.3R3, update to version 19.3R3 or later. For Juniper Networks Junos OS versions 19.4 prior to 19.4R3, update to version 19.4R3 or later. For Juniper Networks Junos OS versions 20.1 prior to 20.1R2, update to version 20.1R2 or later. For Juniper Networks Junos OS versions 20.2 prior to 20.2R2, update to version 20.2R2 or later. For Juniper Networks Junos OS Evolved versions prior to 19.2R3-EVO, update to version 19.2R3-EVO or later. For Juniper Networks Junos OS Evolved versions 19.3 prior to 19.3R3-EVO, update to version 19.3R3-EVO or later. For Juniper Networks Junos OS Evolved versions 19.4 prior to 19.4R3-EVO, update to version 19.4R3-EVO or later. For Juniper Networks Junos OS Evolved versions 20.1 prior to 20.1R3-EVO, update to version 20.1R3-EVO or later. For Juniper Networks Junos OS Evolved versions 20.2 prior to 20.2R2-EVO, update to version 20.2R2-EVO or later.

Fix

DoS

Weakness Enumeration

CWE-459

Related Identifiers

BDU:2023-00566
CVE-2023-22407

Affected Products

Junos
Junos Evolved