CVE-2023-22393CWE-358CWE-754

Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

High · published January 12, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon (RPD) crash by sending a BGP route with invalid next-hop resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems without import policy configured. This issue affects: Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R2-S2, 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2; 22.2 versions prior to 22.2R1-S1, 22.2R2. Juniper Networks Junos OS Evolved 21.4-EVO versions prior to 21.4R2-S2-EVO, 21.4R3-EVO; 22.1-EVO versions prior to 22.1R1-S2-EVO, 22.1R2-EVO; 22.2-EVO versions prior to 22.2R1-S1-EVO, 22.2R2-EVO. This issue does not affect: Juniper Networks Junos OS versions prior to 21.1R1. Juniper Networks Junos OS Evolved versions prior to 21.3R1-EVO.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00633 · 49.7th percentile
Weaknesses
CWE-358 · Improperly Implemented Security Check for Standard; CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2023-01-12T00:00Z
EPSS history
Timeline
  • 12 JAN 00:00Z
    Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop
    cvelistv5