CVE-2023-44181
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a l2 loop resulting in a DDOS violations and DDOS syslog.
This issue is triggered when Storm control is enabled and ICMPv6 packets are present on device.
This issue affects Juniper Networks:
Junos OS
* All versions prior to 20.2R3-S6 on QFX5k;
* 20.3 versions prior to 20.3R3-S5 on QFX5k;
* 20.4 versions prior to 20.4R3-S5 on QFX5k;
* 21.1 versions prior to 21.1R3-S4 on QFX5k;
* 21.2 versions prior to 21.2R3-S3 on QFX5k;
* 21.3 versions prior to 21.3R3-S2 on QFX5k;
* 21.4 versions prior to 21.4R3 on QFX5k;
* 22.1 versions prior to 22.1R3 on QFX5k;
* 22.2 versions prior to 22.2R2 on QFX5k.
Affected (84)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version < 20.2 |
| Running on/with | Platform Versions |
|---|---|
Juniper Qfk5110 | All versions |
Juniper Qfk5120 | All versions |
Juniper Qfk5130 | All versions |
Juniper Qfk5200 | All versions |
Juniper Qfk5210 | All versions |
Juniper Qfk5220 | All versions |
Juniper Qfk5230 | All versions |
Juniper Qfk5700 | All versions |
References (4)
Source: sirt@juniper.net
Technical Description
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Technical Description
Timeline
No history available yet.