Skip to content
OpenAdvisories
Medium WID-SEC-2023-0083 5 CVEs

Juniper JUNOS und JUNOS Evolved: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 11, 2023 · Updated Jan 11, 2023 · de-DE

Vendor: Juniper Networks Product: Junos Product: JUNOS Evolved

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.

Vulnerabilities 5

  • High 7.5
    CVE-2023-22393

    Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

    An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon (RPD) crash by sending a BGP route with invalid next-hop result…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • High 7.5
    CVE-2023-22401

    Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash

    An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On the PTX1…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2023-22406

    Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

    A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). In a segment-routing scenario with OSPF as IGP,…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2023-22407

    Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router

    An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). An rpd crash can occur when an MPLS TE tunnel configura…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 5.3
    CVE-2023-22398

    Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs

    An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS). When an MPLS ping is perfor…

    Juniper Networks Junos OS Junos OS Evolved Network devices

Revision history

  1. #1

    Initiale Fassung

References