CVE-2023-44191

Summary

An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS).

On all Junos OS QFX5000 Series and EX4000 Series platforms, when a high number of VLANs are configured, a specific DHCP packet will cause PFE hogging which will lead to dropping of socket connections.

This issue affects:

Juniper Networks Junos OS on QFX5000 Series and EX4000 Series

• 21.1 versions prior to 21.1R3-S5;
• 21.2 versions prior to 21.2R3-S5;
• 21.3 versions prior to 21.3R3-S5;
• 21.4 versions prior to 21.4R3-S4;
• 22.1 versions prior to 22.1R3-S3;
• 22.2 versions prior to 22.2R3-S1;
• 22.3 versions prior to 22.3R2-S2, 22.3R3;
• 22.4 versions prior to 22.4R2.

This issue does not affect Juniper Networks Junos OS versions prior to 21.1R1

Affected Software

Weaknesses

• CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling
• Denial of Service (DoS)

Workarounds

There are no known workarounds for this issue.

ADP Enrichment

CVE Program Container

Additional References

• https://supportportal.juniper.net/JSA73155

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://supportportal.juniper.net/JSA73155

• ←Previous
• Next→