CVE-2023-44199CWE-754

Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot

High · published October 12, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).

On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart.

This issue affects Juniper Networks Junos OS on MX Series:

* All versions prior to 20.4R3-S4;

* 21.1 version 21.1R1 and later versions;

* 21.2 versions prior to 21.2R3-S2;

* 21.3 versions prior to 21.3R3-S5;

* 21.4 versions prior to 21.4R3;

* 22.1 versions prior to 22.1R3;

* 22.2 versions prior to 22.2R1-S1, 22.2R2.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.2th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2023-10-12T23:05Z
EPSS history
Timeline
  • 12 OCT 23:05Z
    Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot
    cvelistv5