PT-2023-3068 · Juniper Networks · Junos Evolved+1

Published

2023-04-12

·

Updated

2023-05-02

·

CVE-2023-28982

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 20.3R3-S2 Juniper Networks Junos OS versions prior to 20.4R3-S6 Juniper Networks Junos OS versions prior to 21.1R3 Juniper Networks Junos OS versions prior to 21.2R3 Juniper Networks Junos OS versions prior to 21.3R2 Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S6-EVO Juniper Networks Junos OS Evolved versions prior to 21.2R3-EVO Juniper Networks Junos OS Evolved versions prior to 21.3R2-EVO
Description A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). In a BGP rib sharding scenario, when an attribute of an active BGP route is updated, memory will leak. As rpd memory usage increases over time, the rpd process will eventually run out of memory, crash, and restart. The memory utilization can be monitored with the following CLI commands: show task memory and show system processes extensive | match rpd.
Recommendations For Juniper Networks Junos OS versions prior to 20.3R3-S2, update to version 20.3R3-S2 or later. For Juniper Networks Junos OS versions prior to 20.4R3-S6, update to version 20.4R3-S6 or later. For Juniper Networks Junos OS versions prior to 21.1R3, update to version 21.1R3 or later. For Juniper Networks Junos OS versions prior to 21.2R3, update to version 21.2R3 or later. For Juniper Networks Junos OS versions prior to 21.3R2, update to version 21.3R2 or later. For Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions, update to a version that includes the fix for this issue. For Juniper Networks Junos OS Evolved versions prior to 20.4R3-S6-EVO, update to version 20.4R3-S6-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 21.2R3-EVO, update to version 21.2R3-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 21.3R2-EVO, update to version 21.3R2-EVO or later.

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2023-03139
CVE-2023-28982

Affected Products

Junos
Junos Evolved