PT-2023-4005 · Juniper Networks · Junos

Published 2023-07-12 · Updated 2023-07-26 · CVE-2023-36831

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions 22.2 through 22.2R3 Juniper Networks Junos OS on SRX Series versions 22.3 through 22.3R2-S1, 22.3R3 Juniper Networks Junos OS on SRX Series versions 22.4 through 22.4R1-S2, 22.4R2

Description An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Web-Filtering feature causes a jbuf memory leak when accessing certain websites, leading to a Denial of Service condition. The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations. Service restoration is only possible by rebooting the system.

Recommendations For versions 22.2 through 22.2R3, update to version 22.2R3 or later. For versions 22.3 through 22.3R2-S1, 22.3R3, update to version 22.3R2-S1 or later. For versions 22.4 through 22.4R1-S2, 22.4R2, update to version 22.4R1-S2 or later. As a temporary workaround, consider disabling the UTM Web-Filtering feature until a patch is available. Restrict access to the SSL Proxy configuration to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-703

Related Identifiers

BDU:2023-04303

CVE-2023-36831

Affected Products

Junos

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-36831 · Security Note
• https://supportportal.juniper.net/JSA71636 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/696917/?sphrase_id=45670 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36831 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04303 · Security Note
• https://t.me/cvenotify/54386 · Telegram Post
• https://t.me/cibsecurity/66732 · Telegram Post
• https://t.me/cvenotify/55199 · Telegram Post