PT-2023-6305 · Juniper Networks · Junos

Published 2023-10-11 · Updated 2023-10-17 · CVE-2023-44176

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 20.4R3-S8 Junos OS versions 21.2 prior to 21.2R3-S6 Junos OS versions 21.3 prior to 21.3R3-S5 Junos OS versions 22.1 prior to 22.1R3-S3 Junos OS versions 22.3 prior to 22.3R3 Junos OS versions 22.4 prior to 22.4R3

Description A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute specific CLI commands, leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service condition.

Recommendations For Junos OS versions prior to 20.4R3-S8, update to version 20.4R3-S8 or later. For Junos OS versions 21.2 prior to 21.2R3-S6, update to version 21.2R3-S6 or later. For Junos OS versions 21.3 prior to 21.3R3-S5, update to version 21.3R3-S5 or later. For Junos OS versions 22.1 prior to 22.1R3-S3, update to version 22.1R3-S3 or later. For Junos OS versions 22.3 prior to 22.3R3, update to version 22.3R3 or later. For Junos OS versions 22.4 prior to 22.4R3, update to version 22.4R3 or later.

Fix

DoS

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2023-07016

CVE-2023-44176

Affected Products

Junos

References · 5

• https://supportportal.juniper.net/JSA73140 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-44176 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07016 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-44176 · Security Note
• https://twitter.com/CVEnew/status/1712607963230150721 · Twitter Post