MEDIUM🇵🇱 Wersja polska

CVE-2023-22405

CVSS 6.5v3.1pub. 2023-01-13upd. 2024-11-21

An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS) to device due to out of resources. When a device is configured with "service-provider/SP style" switching, and mac-limiting is configured on an Aggregated Ethernet (ae) interface, and then a PFE is restarted or the device is rebooted, mac-limiting doesn't work anymore. Please note that the issue might not be apparent as traffic will continue to flow through the device although the mac table and respective logs will indicate that mac limit is reached. Functionality can be restored by removing and re-adding the MAC limit configuration. This issue affects Juniper Networks Junos OS on QFX5k Series, EX46xx Series: All versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3 on; 21.4 versions prior to 21.4R3 on; 22.1 versions prior to 22.1R2 on.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Juniper Ex4600

    HW
    Juniper
    wszystkie wersje

  • Juniper Ex4600 Vc

    HW
    Juniper
    wszystkie wersje

  • Juniper Ex4650

    HW
    Juniper
    wszystkie wersje

  • Juniper Junos

    OS
    Juniper
    20.220.320.421.121.221.321.422.1< 20.2

  • Juniper Qfx5100

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5100 96s

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5110

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5120

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5130

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5200

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5200 32c

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5200 48y

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5210

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5210 64c

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5220

    HW
    Juniper
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth BypassDoS
CWE
References

Related vulnerabilities

CVE-2023-36845CRITICAL9.8⚠ KEVten sam produkt

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SR...

CVE-2024-21591CRITICAL9.8PL ✓ten sam produkt

Out-of-bounds Write w J-Web Juniper Junos OS — RCE z uprawnieniami root

CVE-2021-0248CRITICAL10.0ten sam produkt

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials ...

CVE-2021-0254CRITICAL9.8ten sam produkt

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unaut...

CVE-2021-0211CRITICAL10.0ten sam produkt

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Rout...