PT-2023-22055 · Juniper Networks · Junos

Published

2023-04-17

·

Updated

2023-04-27

·

CVE-2023-28965

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R3-S11 Junos OS versions 20.2 prior to 20.2R3-S6 Junos OS versions 20.4 prior to 20.4R3-S5 Junos OS versions 21.1 prior to 21.1R3-S4 Junos OS versions 21.2 prior to 21.2R3-S3 Junos OS versions 21.3 prior to 21.3R3 Junos OS versions 21.4 prior to 21.4R2
Description An issue within the storm control feature of Juniper Networks Junos OS allows an attacker to cause a Denial of Service by sending a high rate of traffic. The storm control feature monitors incoming traffic and drops packets if the traffic level exceeds the specified level. Continued receipt and processing of these packets will create a sustained Denial of Service condition.
Recommendations For Junos OS versions prior to 19.3R3-S7, update to version 19.3R3-S7 or later. For Junos OS versions 19.4 prior to 19.4R3-S11, update to version 19.4R3-S11 or later. For Junos OS versions 20.2 prior to 20.2R3-S6, update to version 20.2R3-S6 or later. For Junos OS versions 20.4 prior to 20.4R3-S5, update to version 20.4R3-S5 or later. For Junos OS versions 21.1 prior to 21.1R3-S4, update to version 21.1R3-S4 or later. For Junos OS versions 21.2 prior to 21.2R3-S3, update to version 21.2R3-S3 or later. For Junos OS versions 21.3 prior to 21.3R3, update to version 21.3R3 or later. For Junos OS versions 21.4 prior to 21.4R2, update to version 21.4R2 or later.

Fix

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754CWE-703

Related Identifiers

CVE-2023-28965

Affected Products

Junos