CVE-2023-44185

Technical Description

An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet.

Continued receipt of this packet will cause a sustained Denial of Service condition.

This issue affects:

* Juniper Networks Junos OS:

* All versions prior to 20.4R3-S6;

* 21.1 versions prior to 21.1R3-S5;

* 21.2 versions prior to 21.2R3-S4;

* 21.3 versions prior to 21.3R3-S3;

* 21.4 versions prior to 21.4R3-S3;

* 22.1 versions prior to 22.1R2-S2, 22.1R3;

* 22.2 versions prior to 22.2R2-S1, 22.2R3;

* 22.3 versions prior to 22.3R1-S2, 22.3R2.

Juniper Networks Junos OS Evolved:

* All versions prior to 20.4R3-S6-EVO;

* 21.1-EVO version 21.1R1-EVO and later versions prior to 21.2R3-S4-EVO;

* 21.3-EVO versions prior to 21.3R3-S3-EVO;

* 21.4-EVO versions prior to 21.4R3-S3-EVO;

* 22.1-EVO versions

Remediation

Check the references section for vendor advisories and patches from juniper. Update junos to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References