CVE-2023-44199

Summary

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).

On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart.

This issue affects Juniper Networks Junos OS on MX Series:

  • All versions prior to 20.4R3-S4;
  • 21.1 version 21.1R1 and later versions;
  • 21.2 versions prior to 21.2R3-S2;
  • 21.3 versions prior to 21.3R3-S5;
  • 21.4 versions prior to 21.4R3;
  • 22.1 versions prior to 22.1R3;
  • 22.2 versions prior to 22.2R1-S1, 22.2R2.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OS0 < 20.4R3-S4affected
Juniper NetworksJunos OS21.1R1 < 21.1*affected
Juniper NetworksJunos OS21.2 < 21.2R3-S2affected
Juniper NetworksJunos OS21.3 < 21.3R3-S5affected
Juniper NetworksJunos OS21.4 < 21.4R3affected
Juniper NetworksJunos OS22.1 < 22.1R3affected
Juniper NetworksJunos OS22.2 < 22.2R1-S1, 22.2R2affected

Weaknesses

  • CWE-754: CWE-754 Improper Check for Unusual or Exceptional Conditions
  • Denial of Service (DoS)

Workarounds

There are no known workarounds for this issue.

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References