PT-2023-3064 · Juniper Networks · Junos Evolved+1

Published

2023-04-12

·

Updated

2023-05-02

·

CVE-2023-28981

CVSS v3.1

6.5

Medium

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 20.3R3-S5 Juniper Networks Junos OS versions prior to 20.4R3-S3 Juniper Networks Junos OS versions prior to 21.1R3-S4 Juniper Networks Junos OS versions prior to 21.2R3 Juniper Networks Junos OS versions prior to 21.3R3 Juniper Networks Junos OS versions prior to 21.4R2 Juniper Networks Junos OS versions prior to 22.1R2 Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S6-EVO Juniper Networks Junos OS Evolved versions prior to 21.3R3-EVO Juniper Networks Junos OS Evolved versions prior to 21.4R2-EVO Juniper Networks Junos OS Evolved versions prior to 22.1R2-EVO
Description An Improper Input Validation issue in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). If the receipt of router advertisements is enabled on an interface and a specifically malformed RA packet is received, memory corruption will happen which leads to an rpd crash.
Recommendations For Juniper Networks Junos OS versions prior to 20.3R3-S5, update to version 20.3R3-S5 or later. For Juniper Networks Junos OS versions prior to 20.4R3-S3, update to version 20.4R3-S3 or later. For Juniper Networks Junos OS versions prior to 21.1R3-S4, update to version 21.1R3-S4 or later. For Juniper Networks Junos OS versions prior to 21.2R3, update to version 21.2R3 or later. For Juniper Networks Junos OS versions prior to 21.3R3, update to version 21.3R3 or later. For Juniper Networks Junos OS versions prior to 21.4R2, update to version 21.4R2 or later. For Juniper Networks Junos OS versions prior to 22.1R2, update to version 22.1R2 or later. For Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions, no specific update is provided. For Juniper Networks Junos OS Evolved versions prior to 20.4R3-S6-EVO, update to version 20.4R3-S6-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 21.3R3-EVO, update to version 21.3R3-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 21.4R2-EVO, update to version 21.4R2-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 22.1R2-EVO, update to version 22.1R2-EVO or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2023-03133
CVE-2023-28981

Affected Products

Junos
Junos Evolved