Skip to content
OpenAdvisories
Medium WID-SEC-2023-0072 7 CVEs

Juniper JUNOS, QFX Series, EX Series: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 11, 2023 · Updated Jan 11, 2023 · de-DE

Vendor: Juniper Networks Product: EX Series EX46xx Product: Junos Product: JUNOS ACX2K Series Product: QFX Series Product: QFX Series QFX10K Product: QFX Series QFX5k

Summary

Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper QFX Series und Juniper EX Series ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.
Die Switches der QFX-Serie von Juniper sichern und automatisieren Netzwerke in Rechenzentren.
Bei den Switches der Juniper EX-Serie handelt es sich um Access- und Aggregations-/Core-Layer-Switches.

Vulnerabilities 7

  • High 7.5
    CVE-2023-22391

    Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)

    A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly routed to a queue u…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22396

    Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

    An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ul…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22399

    Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled

    When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe process of Juniper Networks Junos OS on QFX10K Series systems allows an attacker to cause the Packet Forwarding Engine (PFE) to crash and restart…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22403

    Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic

    An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On QFX10K Series, Inter-Chassis Contr…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2023-22395

    Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

    A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). In an MPLS scenario specific packets destined to an Integrated Routi…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2023-22405

    Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

    An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS) to dev…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2023-22414

    Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

    A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator (FPC) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and l…

    Juniper Networks Junos OS Network devices

Revision history

  1. #1

    Initiale Fassung

References