← Back

CVE-2023-44191

nvd nist
Published: Oct 13, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all Junos OS QFX5000 Series and EX4000 Series platforms, when a high number of VLANs are configured, a specific DHCP packet will cause PFE hogging which will lead to dropping of socket connections. This issue affects: Juniper Networks Junos OS on QFX5000 Series and EX4000 Series * 21.1 versions prior to 21.1R3-S5; * 21.2 versions prior to 21.2R3-S5; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S1; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2. This issue does not affect Juniper Networks Junos OS versions prior to 21.1R1

Affected (68)

Products: Juniper: Junos
1 product
Junos
Configuration A
68 vulnerable · 24 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 21.1
Version 21.1 r1-s1
Version 21.1 r1
Version 21.1 r2-s1
Version 21.1 r2-s2
Version 21.1 r2
Version 21.1 r3-s1
Version 21.1 r3-s2
Version 21.1 r3-s3
Version 21.1 r3-s4
Version 21.1 r3
Version 21.2
Version 21.2 r1-s1
Version 21.2 r1-s2
Version 21.2 r1
Version 21.2 r2-s1
Version 21.2 r2-s2
Version 21.2 r2
Version 21.2 r3-s1
Version 21.2 r3-s2
Version 21.2 r3-s3
Version 21.2 r3-s4
Version 21.2 r3
Version 21.3
Version 21.3 r1-s1
Version 21.3 r1-s2
Version 21.3 r1
Version 21.3 r2-s1
Version 21.3 r2-s2
Version 21.3 r2
Version 21.3 r3-s1
Version 21.3 r3-s2
Version 21.3 r3-s3
Version 21.3 r3-s4
Version 21.3 r3
Version 21.4
Version 21.4 r1-s1
Version 21.4 r1-s2
Version 21.4 r1
Version 21.4 r2-s1
Version 21.4 r2-s2
Version 21.4 r2
Version 21.4 r3-s1
Version 21.4 r3-s2
Version 21.4 r3-s3
Version 21.4 r3
Version 22.1 r1-s1
Version 22.1 r1-s2
Version 22.1 r1
Version 22.1 r2-s1
Version 22.1 r2-s2
Version 22.1 r2
Version 22.1 r3-s1
Version 22.1 r3-s2
Version 22.1 r3
Version 22.2
Version 22.2 r1-s1
Version 22.2 r1-s2
Version 22.2 r1
Version 22.2 r3
Version 22.3 r1-s1
Version 22.3 r1-s2
Version 22.3 r1
Version 22.3 r2-s1
Version 22.3 r2
Version 22.4 r1-s1
Version 22.4 r1-s2
Version 22.4 r1
Running on/withPlatform Versions
Juniper
Ex2300
All versions
Juniper
Ex2300 C
All versions
Juniper
Ex2300 Multigigabit
All versions
Juniper
Ex3400
All versions
Juniper
Ex4100
All versions
Juniper
Ex4100 F
All versions
Juniper
Ex4100 Multigigabit
All versions
Juniper
Ex4300
All versions
Juniper
Ex4300 Multigigabit
All versions
Juniper
Ex4400
All versions
Juniper
Ex4400 24x
All versions
Juniper
Ex4400 Multigigabit
All versions
Juniper
Ex4600
All versions
Juniper
Ex4650
All versions
Juniper
Ex9200
All versions
Juniper
Ex9250
All versions
Juniper
Qfk5110
All versions
Juniper
Qfk5120
All versions
Juniper
Qfk5130
All versions
Juniper
Qfk5200
All versions
Juniper
Qfk5210
All versions
Juniper
Qfk5220
All versions
Juniper
Qfk5230
All versions
Juniper
Qfk5700
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.