Skip to content
OpenAdvisories
Medium WID-SEC-2023-2212 1 CVE

Juniper JUNOS: Schwachstelle ermöglicht Denial of Service

Published Aug 29, 2023 · Updated Aug 29, 2023 · de-DE

Vendor: Juniper Networks Product: Junos Product: JUNOS < 23.4R1 Product: JUNOS < 23.4R1-EVO

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Juniper JUNOS ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.

Vulnerabilities 1

  • High 7.5
    CVE-2023-4481 EPSS 18%

    Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

    An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When certain specific crafted BGP UPDATE me…

    Juniper Networks Junos OS Junos OS Evolved Network devices

Revision history

  1. #1

    Initiale Fassung

References

  • Juniper Security Advisory vom 2023-08-29
    https://supportportal.juniper.net/s/article/2023-08-29-Out-of-Cycle-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-A-crafted-BGP-UPDATE-message-allows-a-remote-attacker-to-de-peer-reset-BGP-sessions-CVE-2023-4481