Skip to content
OpenAdvisories
Medium WID-SEC-2023-0079 11 CVEs

Juniper JUNOS, SRX Series und MX Series: Schwachstellen ermöglichen Denial of Service

Published Jan 11, 2023 · Updated Jan 11, 2023 · de-DE

Vendor: Juniper Networks Product: Junos Product: MX Series Product: SRX Series Product: SRX Series 5000

Summary

Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper SRX Series und Juniper MX Series ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.
SRX Series Services Gateways ist ein Next-Generation Anti-Threat Firewall von Juniper.
Die Juniper MX-Serie ist eine Produktfamilie von Routern.

Vulnerabilities 11

  • High 7.5
    CVE-2023-22394

    Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls

    An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to cause a memory leak leading to Denial of Services (DoS). This issue occurs on all …

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22408

    Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash

    An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). When an attacker sends an SIP packets with a malformed SDP …

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22410

    Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.

    A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Networks Junos OS on MX Series platforms with MPC10/MPC11 line cards, allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). Devices are only vulnerable…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22411

    Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

    An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On SRX Series devices using Unified Policies with IPv6, when a specific IPv…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22412

    Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed

    An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attacker to cause a flow processing daemon (flowd) crash and thereby a Denial of Serv…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22413

    Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets

    An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or MS-MIC card, when spe…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22415

    Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received

    An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Series and SRX Series platform, when H.323 ALG is enabled and specific H.323 packe…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22416

    Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received

    A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SRX Series platform with SIP ALG enabled, when a malformed SIP packet is received…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2023-22417

    Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash

    A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). In an IPsec VPN environment, a memory le…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2023-22404

    Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

    An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon (iked) of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an authenticated, network-based attacker to cause a Denial of Service (DoS). iked will crash and restar…

    Juniper Networks Junos OS Network devices
  • Medium 5.5
    CVE-2023-22409

    Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

    An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service (DoS). When an inconsistent "deterministic NAT" configuration is present o…

    Juniper Networks Junos OS Network devices

Revision history

  1. #1

    Initiale Fassung

References