Skip to content
OpenAdvisories
High · 7.5 CVE-2023-36831 EUVD-2023-40751GHSA-g6m3-8xg2-qjhj

Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

Published Jul 14, 2023 · Updated Nov 7, 2024 · Assigned by juniper

Description

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition. Service restoration is only possible by rebooting the system.

The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations. Other products, platforms, and configurations are not affected by this vulnerability.

This issue affects Juniper Networks Junos OS on SRX Series:
22.2 versions prior to 22.2R3;
22.3 versions prior to 22.3R2-S1, 22.3R3;
22.4 versions prior to 22.4R1-S2, 22.4R2.

This issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS 22.2 – < 22.2R3, 22.3 – < 22.3R2-S1, 22.3R3, 22.4 – < 22.4R1-S2, 22.4R2 22.2R3

Advisories 1

References