Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-44175— Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash

Quick assessment

Affected
Juniper Networks Junos OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS和Junos OS Evolved存在安全漏洞，该漏洞源于路由协议守护程序（rpd）中存在安全漏洞。攻击者可利用该漏洞向设备发送特定的PIM数据包，导致rpd崩溃，从而导致拒绝服务（DoS）。

CVSS 6.5 · Medium EPSS 0.52% · P42

Possible ATT&CK Techniques 1 AI

T1498 · Network Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-44175

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash
Source: CVE Program / CVE List V5
Vulnerability Description
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Note: This issue is not noticed when all the devices in the network are Juniper devices. This issue affects Juniper Networks: Junos OS: * All versions prior to 20.4R3-S7; * 21.2 versions prior to 21.2R3-S5; * 21.3 versions prior to 21.3R3-S4; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3; * 22.3 versions prior to 22.3R3; * 22.4 versions prior to 22.4R3. Junos OS Evolved: * All versions prior to 22.3R3-EVO; * 22.4-EVO versions prior to 22.4R3-EVO; * 23.2-EVO versions prior to 23.2R1-EVO.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可达断言
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Junos OS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS和Junos OS Evolved存在安全漏洞，该漏洞源于路由协议守护程序（rpd）中存在安全漏洞。攻击者可利用该漏洞向设备发送特定的PIM数据包，导致rpd崩溃，从而导致拒绝服务（DoS）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Juniper Networks Junos OS 0 ~ 20.4R3-S7 -
Juniper Networks Junos OS Evolved 0 ~ 22.3R3-EVO -

II. Public POCs for CVE-2023-44175

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-44175

请登录查看更多情报信息。

Other References for CVE-2023-44175 (1)

Same Patch Batch · Juniper Networks · 2023-10-12 · 25 CVEs total

CVE-2023-44194 8.4 HIGH Junos OS: An unauthenticated attacker with local access to the device can create a backdoo
CVE-2023-44199 7.5 HIGH Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an F
CVE-2023-36841 7.5 HIGH Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service
CVE-2023-44197 7.5 HIGH Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned
CVE-2023-36843 7.5 HIGH Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP i
CVE-2023-44181 7.5 HIGH Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment
CVE-2023-44192 7.5 HIGH Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are trans
CVE-2023-44191 7.5 HIGH Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN
CVE-2023-44185 7.5 HIGH Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processin
CVE-2023-44182 7.3 HIGH Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affe
CVE-2023-22392 6.5 MEDIUM Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as t
CVE-2023-44204 6.5 MEDIUM Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE me
CVE-2023-36839 6.5 MEDIUM Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are re
CVE-2023-44183 6.5 MEDIUM Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within t
CVE-2023-44184 6.5 MEDIUM Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command
CVE-2023-44196 6.5 MEDIUM Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach
CVE-2023-44203 6.5 MEDIUM Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will
CVE-2023-44198 5.8 MEDIUM Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmit
CVE-2023-44193 5.5 MEDIUM Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a
CVE-2023-44178 5.5 MEDIUM Junos OS : Stack overflow vulnerability in CLI command processing

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Junos OS
Same vendor: Juniper Networks
Same weakness: CWE-617

V. Comments for CVE-2023-44175

No comments yet

Leave a comment