Skip to content
OpenAdvisories
Medium WID-SEC-2023-1527 1 CVE

Juniper JUNOS: Schwachstelle ermöglicht Denial of Service

Published Jun 21, 2023 · Updated Jun 21, 2023 · de-DE

Vendor: Juniper Networks Product: Junos Product: JUNOS < 20.4R3-S8 Product: JUNOS < 21.2R3-S6 Product: JUNOS < 21.3R3-S5 Product: JUNOS < 21.4R3-S4 Product: JUNOS < 22.1R3-S4 Product: JUNOS < 22.2R3-S2 Product: JUNOS < 22.3R3-S2 Product: JUNOS < 22.4R2-S1 Product: JUNOS < 22.4R3 Product: JUNOS < 23.1R1-S1 Product: JUNOS < 23.1R2

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Juniper JUNOS ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.

Vulnerabilities 1

  • High 7.5
    CVE-2023-0026

    2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute

    An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a BGP update message is received over …

    Juniper Networks Junos OS Junos OS Evolved Network devices

Revision history

  1. #1

    Initiale Fassung

References

  • Juniper Security Advisory vom 2023-06-21
    https://supportportal.juniper.net/s/article/2023-06-Out-of-Cycle-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-A-BGP-session-will-flap-upon-receipt-of-a-specific-optional-transitive-attribute-CVE-2023-0026?language=en_US