PT-2023-4003 · Juniper Networks · Junos

Published

2023-07-12

·

Updated

2023-07-26

·

CVE-2023-36832

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on MX Series versions prior to 19.1R3-S10 Juniper Networks Junos OS on MX Series 19.2 versions prior to 19.2R3-S7 Juniper Networks Junos OS on MX Series 19.3 versions prior to 19.3R3-S8 Juniper Networks Junos OS on MX Series 19.4 versions prior to 19.4R3-S12 Juniper Networks Junos OS on MX Series 20.2 versions prior to 20.2R3-S8 Juniper Networks Junos OS on MX Series 20.4 versions prior to 20.4R3-S7 Juniper Networks Junos OS on MX Series 21.1 versions prior to 21.1R3-S5 Juniper Networks Junos OS on MX Series 21.2 versions prior to 21.2R3-S5 Juniper Networks Junos OS on MX Series 21.3 versions prior to 21.3R3-S4 Juniper Networks Junos OS on MX Series 21.4 versions prior to 21.4R3-S3 Juniper Networks Junos OS on MX Series 22.1 versions prior to 22.1R3-S2 Juniper Networks Junos OS on MX Series 22.2 versions prior to 22.2R3 Juniper Networks Junos OS on MX Series 22.3 versions prior to 22.3R2-S1, 22.3R3 Juniper Networks Junos OS on MX Series 22.4 versions prior to 22.4R1-S2, 22.4R2
Description The issue is related to an Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series. This vulnerability allows an unauthenticated network-based attacker to send specific packets to an Aggregated Multiservices (AMS) interface on the device, causing the packet forwarding engine (PFE) to crash, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue is only triggered by packets destined to a local-interface via a service-interface (AMS) and is not experienced on other types of interfaces or configurations. Additionally, transit traffic does not trigger this issue.
Recommendations For versions prior to 19.1R3-S10, update to version 19.1R3-S10 or later. For 19.2 versions prior to 19.2R3-S7, update to version 19.2R3-S7 or later. For 19.3 versions prior to 19.3R3-S8, update to version 19.3R3-S8 or later. For 19.4 versions prior to 19.4R3-S12, update to version 19.4R3-S12 or later. For 20.2 versions prior to 20.2R3-S8, update to version 20.2R3-S8 or later. For 20.4 versions prior to 20.4R3-S7, update to version 20.4R3-S7 or later. For 21.1 versions prior to 21.1R3-S5, update to version 21.1R3-S5 or later. For 21.2 versions prior to 21.2R3-S5, update to version 21.2R3-S5 or later. For 21.3 versions prior to 21.3R3-S4, update to version 21.3R3-S4 or later. For 21.4 versions prior to 21.4R3-S3, update to version 21.4R3-S3 or later. For 22.1 versions prior to 22.1R3-S2, update to version 22.1R3-S2 or later. For 22.2 versions prior to 22.2R3, update to version 22.2R3 or later. For 22.3 versions prior to 22.3R2-S1, 22.3R3, update to version 22.3R2-S1, 22.3R3 or later. For 22.4 versions prior to 22.4R1-S2, 22.4R2, update to version 22.4R1-S2, 22.4R2 or later.

Fix

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

BDU:2023-04301
CVE-2023-36832

Affected Products

Junos