PT-2023-6081 · Juniper Networks · Junos

Published 2023-10-12 · Updated 2024-09-18 · CVE-2023-36843

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 20.4R3-S8, 20.4R3-S9 Juniper Networks Junos OS version 21.1R1 and later versions Juniper Networks Junos OS versions prior to 21.2R3-S6 Juniper Networks Junos OS versions prior to 21.3R3-S5 Juniper Networks Junos OS versions prior to 21.4R3-S5 Juniper Networks Junos OS versions prior to 22.1R3-S4 Juniper Networks Junos OS versions prior to 22.2R3-S2 Juniper Networks Junos OS versions prior to 22.3R2-S2, 22.3R3 Juniper Networks Junos OS versions prior to 22.4R2-S1, 22.4R3

Description The issue is related to an Improper Handling of Inconsistent Special Elements vulnerability in the Junos Services Framework (jsf) module. This vulnerability allows an unauthenticated network-based attacker to cause a crash in the Packet Forwarding Engine (pfe), resulting in a Denial of Service (DoS). The crash occurs when the device receives malformed SSL traffic, and a manual restart is required to recover the device. This issue only affects devices with Juniper Networks Advanced Threat Prevention (ATP) Cloud enabled with Encrypted Traffic Insights, configured via the security-metadata-streaming policy.

Recommendations For versions prior to 20.4R3-S8, 20.4R3-S9, update to version 20.4R3-S8 or later. For version 21.1R1 and later versions, update to a version that includes the fix for this issue. For versions prior to 21.2R3-S6, update to version 21.2R3-S6 or later. For versions prior to 21.3R3-S5, update to version 21.3R3-S5 or later. For versions prior to 21.4R3-S5, update to version 21.4R3-S5 or later. For versions prior to 22.1R3-S4, update to version 22.1R3-S4 or later. For versions prior to 22.2R3-S2, update to version 22.2R3-S2 or later. For versions prior to 22.3R2-S2, 22.3R3, update to version 22.3R2-S2 or later. For versions prior to 22.4R2-S1, 22.4R3, update to version 22.4R2-S1 or later. As a temporary workaround, consider disabling the Encrypted Traffic Insights feature until a patch is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-168

CWE-20

Related Identifiers

BDU:2023-06784

CVE-2023-36843

Affected Products

Junos

References · 10

• https://osv.dev/vulnerability/CVE-2023-36843 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06784 · Security Note
• https://supportportal.juniper.net/JSA73174 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36843 · Security Note
• https://twitter.com/VulmonFeeds/status/1712626052629930358 · Twitter Post
• https://t.me/cibsecurity/72209 · Telegram Post
• https://vuldb.com/pt/?id.242062 · Note
• https://t.me/cvenotify/95133 · Telegram Post
• https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-SRX-Series-The-PFE-will-crash-on-receiving-malformed-SSL-traffic-when-ATP-is-enabled-CVE-2023-36843?language=en_US · Note
• https://twitter.com/CVEnew/status/1712607967177015656 · Twitter Post