PT-2023-6130 · Juniper Networks · Junos

CVE-2023-44199

·

Publicado

2023-10-11

·

Atualizado

2023-10-20

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on MX Series versions prior to 20.4R3-S4 Juniper Networks Junos OS on MX Series version 21.1R1 and later versions Juniper Networks Junos OS on MX Series versions prior to 21.2R3-S2 Juniper Networks Junos OS on MX Series versions prior to 21.3R3-S5 Juniper Networks Junos OS on MX Series versions prior to 21.4R3 Juniper Networks Junos OS on MX Series versions prior to 22.1R3 Juniper Networks Junos OS on MX Series versions prior to 22.2R1-S1, 22.2R2
Description The issue is related to an improper check for unusual or exceptional conditions in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series. This can be exploited by a remote attacker to cause a Denial of Service (DoS). On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart.
Recommendations For versions prior to 20.4R3-S4, update to version 20.4R3-S4 or later. For version 21.1R1 and later versions, update to version 21.2R3-S2 or later. For versions prior to 21.2R3-S2, update to version 21.2R3-S2 or later. For versions prior to 21.3R3-S5, update to version 21.3R3-S5 or later. For versions prior to 21.4R3, update to version 21.4R3 or later. For versions prior to 22.1R3, update to version 22.1R3 or later. For versions prior to 22.2R1-S1, 22.2R2, update to version 22.2R1-S1, 22.2R2 or later.

Correção

DoS

Improper Check for Exceptional Conditions

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-06836
CVE-2023-44199

Produtos afetados

Junos