← CVE Intelligence

CVE-2023-22407

Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router PUBLISHED

Description (CNA)

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected router. This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S7; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2. Juniper Networks Junos OS Evolved All versions prior to 19.2R3-EVO; 19.3 versions prior to 19.3R3-EVO; 19.4 versions prior to 19.4R3-EVO; 20.1 versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R2-EVO.

Affected (CNA)

Vendor / productVersions
Juniper Networks / Junos OSaffected unspecified before 18.4R2-S7; affected 19.1 before 19.1R3-S2; affected 19.2 before 19.2R3; affected 19.3 before 19.3R3; affected 19.4 before 19.4R3; affected 20.1 before 20.1R2; affected 20.2 before 20.2R2
Juniper Networks / Junos OS Evolvedaffected unspecified before 19.2R3-EVO; affected 19.3 before 19.3R3-EVO; affected 19.4 before 19.4R3-EVO; affected 20.1 before 20.1R3-EVO; affected 20.2 before 20.2R2-EVO

CWE

CWE-459

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.