PT-2023-6134 · Juniper Networks · Junos

Published

2023-10-11

·

Updated

2023-10-20

·

CVE-2023-44183

CVSS v3.1

6.5

Medium

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 20.4R3-S8 Junos OS versions 21.1R1 through 21.2R3-S6 Junos OS versions prior to 21.3R3-S5 Junos OS versions prior to 21.4R3-S4 Junos OS versions prior to 22.1R3-S3 Junos OS versions prior to 22.2R3-S1 Junos OS versions prior to 22.3R3 Junos OS versions prior to 22.4R2
Description The issue exists due to insufficient input validation in the Packet Forwarding Engine (PFE) of Junos OS on QFX5000 Series and EX4600 Series devices. This allows an unauthenticated, adjacent attacker to possibly cause a DMA memory leak under specific operational conditions by sending two or more genuine packets in the same VxLAN topology. An indicator of compromise may be seen when multiple devices indicate that FPC0 has gone missing, and a number of interfaces have also gone missing.
Recommendations For Junos OS versions prior to 20.4R3-S8, update to version 20.4R3-S8 or later. For Junos OS versions 21.1R1 through 21.2R3-S6, update to version 21.2R3-S6 or later. For Junos OS versions prior to 21.3R3-S5, update to version 21.3R3-S5 or later. For Junos OS versions prior to 21.4R3-S4, update to version 21.4R3-S4 or later. For Junos OS versions prior to 22.1R3-S3, update to version 22.1R3-S3 or later. For Junos OS versions prior to 22.2R3-S1, update to version 22.2R3-S1 or later. For Junos OS versions prior to 22.3R3, update to version 22.3R3 or later. For Junos OS versions prior to 22.4R2, update to version 22.4R2 or later.

Fix

Memory Leak

RCE

Weakness Enumeration

CWE-401CWE-20

Related Identifiers

BDU:2023-06840
CVE-2023-44183

Affected Products

Junos