PT-2023-2578 · Juniper Networks · Junos
Published
2023-04-12
·
Updated
2023-04-27
·
CVE-2023-28970
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos OS on JRR200 versions prior to 21.2R3-S4
Juniper Networks Junos OS on JRR200 version 21.3 prior to 21.3R3-S4
Juniper Networks Junos OS on JRR200 version 21.4 prior to 21.4R3-S3
Juniper Networks Junos OS on JRR200 version 22.1 prior to 22.1R3-S1
Juniper Networks Junos OS on JRR200 version 22.2 prior to 22.2R2-S2, 22.2R3
Juniper Networks Junos OS on JRR200 version 22.3 prior to 22.3R1-S2, 22.3R2
Juniper Networks Junos OS on JRR200 version 22.4 prior to 22.4R1-S1, 22.4R2
Description
An issue in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by an attacker on the local broadcast domain.
Recommendations
For versions prior to 21.2R3-S4, update to 21.2R3-S4 or later.
For versions 21.3 prior to 21.3R3-S4, update to 21.3R3-S4 or later.
For versions 21.4 prior to 21.4R3-S3, update to 21.4R3-S3 or later.
For versions 22.1 prior to 22.1R3-S1, update to 22.1R3-S1 or later.
For versions 22.2 prior to 22.2R2-S2, 22.2R3, update to 22.2R2-S2, 22.2R3 or later.
For versions 22.3 prior to 22.3R1-S2, 22.3R2, update to 22.3R1-S2, 22.3R2 or later.
For versions 22.4 prior to 22.4R1-S1, 22.4R2, update to 22.4R1-S1, 22.4R2 or later.
Fix
DoS
Improper Handling of Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Junos