← CVE Intelligence

CVE-2023-44175

Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash PUBLISHED

Description (CNA)

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Note: This issue is not noticed when all the devices in the network are Juniper devices. This issue affects Juniper Networks: Junos OS: * All versions prior to 20.4R3-S7; * 21.2 versions prior to 21.2R3-S5; * 21.3 versions prior to 21.3R3-S4; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3; * 22.3 versions prior to 22.3R3; * 22.4 versions prior to 22.4R3. Junos OS Evolved: * All versions prior to 22.3R3-EVO; * 22.4-EVO versions prior to 22.4R3-EVO; * 23.2-EVO versions prior to 23.2R1-EVO.

Affected (CNA)

Vendor / productVersions
Juniper Networks / Junos OSaffected 0 before 20.4R3-S7; affected 21.1 before 21.1R3-S4; affected 21.2 before 21.2R3-S5; affected 21.3 before 21.3R3-S4; affected 21.4 before 21.4R3-S4; affected 22.1 before 22.1R3-S4; affected 22.2 before 22.2R3; affected 22.3 before 22.3R3; affected 22.4 before 22.4R3
Juniper Networks / Junos OS Evolvedaffected 0 before 22.3R3-EVO; affected 22.4-EVO before 22.4R3-EVO; affected 23.2-EVO before 23.2R1-EVO

CWE

CWE-617

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.