CVE-2023-28976CWE-754

Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

High · published April 17, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). If specific traffic is received on MX Series and its rate exceeds the respective DDoS protection limit the ingress PFE will crash and restart. Continued receipt of this traffic will create a sustained DoS condition. This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S5; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2023-04-17T00:00Z
EPSS history
Timeline
  • 17 APR 00:00Z
    Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash
    cvelistv5