CVE-2023-44175CWE-617

Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash

Medium · published October 12, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service (DoS).

Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.

Note: This issue is not noticed when all the devices in the network are Juniper devices.

This issue affects Juniper Networks:

Junos OS:

* All versions prior to 20.4R3-S7;

* 21.2 versions prior to 21.2R3-S5;

* 21.3 versions prior to 21.3R3-S4;

* 21.4 versions prior to 21.4R3-S4;

* 22.1 versions prior to 22.1R3-S4;

* 22.2 versions prior to 22.2R3;

* 22.3 versions prior to 22.3R3;

* 22.4 versions prior to 22.4R3.

Junos OS Evolved:

* All versions prior to 22.3R3-EVO;

* 22.4-EVO versions prior to 22.4R3-EVO;

* 23.2-EVO versions prior to 23.2R1-EVO.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.8th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2023-10-12T22:59Z
EPSS history
Timeline
  • 12 OCT 22:59Z
    Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash
    cvelistv5