Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-44193— Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run

Quick assessment

Affected
Juniper Networks Junos OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在安全漏洞，该漏洞源于数据包转发引擎 (PFE) 中的删除最后引用之前内存释放不当的漏洞允许本地低权限攻击者导致 FPC 崩溃，从而导致拒绝服务 (DoS)。

CVSS 5.5 · Medium EPSS 0.17% · P5
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-44193

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run
Source: CVE Program / CVE List V5
Vulnerability Description
An Improper Release of Memory Before Removing Last Reference vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a local, low privileged attacker to cause an FPC crash, leading to Denial of Service (DoS). On all Junos MX Series with MPC1 - MPC9, LC480, LC2101, MX10003, and MX80, when Connectivity-Fault-Management (CFM) is enabled in a VPLS scenario, and a specific LDP related command is run, an FPC will crash and reboot. Continued execution of this specific LDP command can lead to sustained Denial of Service condition. This issue affects: Juniper Networks Junos OS on MX Series: * All versions prior to 20.4R3-S7; * 21.1 versions prior to 21.1R3-S5; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S4; * 21.4 versions prior to 21.4R3-S3; * 22.1 versions prior to 22.1R3-S1; * 22.2 versions prior to 22.2R2-S1, 22.2R3; * 22.3 versions prior to 22.3R1-S2, 22.3R2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Junos OS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在安全漏洞，该漏洞源于数据包转发引擎 (PFE) 中的删除最后引用之前内存释放不当的漏洞允许本地低权限攻击者导致 FPC 崩溃，从而导致拒绝服务 (DoS)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Juniper Networks Junos OS 0 ~ 20.4R3-S7 -

II. Public POCs for CVE-2023-44193

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-44193

请登录查看更多情报信息。

Other References for CVE-2023-44193 (1)

Same Patch Batch · Juniper Networks · 2023-10-12 · 25 CVEs total

CVE-2023-44194 8.4 HIGH Junos OS: An unauthenticated attacker with local access to the device can create a backdoo
CVE-2023-44199 7.5 HIGH Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an F
CVE-2023-36841 7.5 HIGH Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service
CVE-2023-44197 7.5 HIGH Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned
CVE-2023-36843 7.5 HIGH Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP i
CVE-2023-44192 7.5 HIGH Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are trans
CVE-2023-44191 7.5 HIGH Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN
CVE-2023-44185 7.5 HIGH Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processin
CVE-2023-44181 7.5 HIGH Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment
CVE-2023-44182 7.3 HIGH Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affe
CVE-2023-44184 6.5 MEDIUM Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command
CVE-2023-22392 6.5 MEDIUM Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as t
CVE-2023-36839 6.5 MEDIUM Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are re
CVE-2023-44175 6.5 MEDIUM Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash
CVE-2023-44183 6.5 MEDIUM Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within t
CVE-2023-44204 6.5 MEDIUM Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE me
CVE-2023-44196 6.5 MEDIUM Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach
CVE-2023-44203 6.5 MEDIUM Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will
CVE-2023-44198 5.8 MEDIUM Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmit
CVE-2023-44178 5.5 MEDIUM Junos OS : Stack overflow vulnerability in CLI command processing

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Junos OS
Same vendor: Juniper Networks
Same weakness: CWE-401

V. Comments for CVE-2023-44193

No comments yet

Leave a comment