PT-2023-3060 · Juniper Networks · Junos

Published

2023-04-12

·

Updated

2023-04-28

·

CVE-2023-28974

CVSS v3.1

7.4

High

VectorAV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.4R3-S11 Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S7 Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S6 Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S6 Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S4 Juniper Networks Junos OS 21.2 versions prior to 21.2R3-S4 Juniper Networks Junos OS 21.3 versions prior to 21.3R3-S3 Juniper Networks Junos OS 21.4 versions prior to 21.4R3-S2 Juniper Networks Junos OS 22.1 versions prior to 22.1R2-S2, 22.1R3 Juniper Networks Junos OS 22.2 versions prior to 22.2R2 Juniper Networks Junos OS 22.3 versions prior to 22.3R1-S2, 22.3R2
Description The issue is related to an Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS. This vulnerability allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS) by sending a specifically malformed ICMP packet to the device. The bbe-smgd will crash, affecting subscriber sessions. Continued receipt of such packets will lead to a sustained DoS condition. A log message "BBE TRACE(TRACE LEVEL INFO, "%s: Dropped unsupported ICMP PKT ..." can be seen if the traceoptions for the processes smg-service are enabled.
Recommendations For Juniper Networks Junos OS versions prior to 19.4R3-S11, update to version 19.4R3-S11 or later. For Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S7, update to version 20.2R3-S7 or later. For Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S6, update to version 20.3R3-S6 or later. For Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S6, update to version 20.4R3-S6 or later. For Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S4, update to version 21.1R3-S4 or later. For Juniper Networks Junos OS 21.2 versions prior to 21.2R3-S4, update to version 21.2R3-S4 or later. For Juniper Networks Junos OS 21.3 versions prior to 21.3R3-S3, update to version 21.3R3-S3 or later. For Juniper Networks Junos OS 21.4 versions prior to 21.4R3-S2, update to version 21.4R3-S2 or later. For Juniper Networks Junos OS 22.1 versions prior to 22.1R2-S2, 22.1R3, update to version 22.1R2-S2, 22.1R3 or later. For Juniper Networks Junos OS 22.2 versions prior to 22.2R2, update to version 22.2R2 or later. For Juniper Networks Junos OS 22.3 versions prior to 22.3R1-S2, 22.3R2, update to version 22.3R1-S2, 22.3R2 or later. As a temporary workaround, consider disabling the bbe-smgd service until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the vulnerable ICMP packet in the affected API endpoint until the issue is resolved.

Fix

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2023-03129
CVE-2023-28974

Affected Products

Junos