CVE-2023-44176
Assigner: juniper
Published: 2023-10-12T23:00:51.422Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Junos OS
vendor: Juniper Networks
versions: lessThan: 20.4R3-S8
status: affected
version: 0
versionType: semver
lessThan: 21.2R3-S6
status: affected
version: 21.2
versionType: semver
lessThan: 21.3R3-S5
status: affected
version: 21.3
versionType: semver
lessThan: 22.1R3-S3
status: affected
version: 22.1
versionType: semver
lessThan: 22.3R3
status: affected
version: 22.3
versionType: semver
lessThan: 22.4R3
status: affected
version: 22.4
versionType: semver
datePublic: 2023-10-11T16:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<p>A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service.</p><p>Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition.</p><p>This issue affects Juniper Networks:</p><p>Junos OS:</p><p></p><ul><li>All versions prior to 20.4R3-S8;</li><li>21.2 versions prior to 21.2R3-S6;</li><li>21.3 versions prior to 21.3R3-S5;</li><li>22.1 versions prior to 22.1R3-S3;</li><li>22.3 versions prior to 22.3R3;</li><li>22.4 versions prior to 22.4R3.</li></ul><p></p>


value: 
A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service.

Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition.

This issue affects Juniper Networks:

Junos OS:



  *  All versions prior to 20.4R3-S8;
  *  21.2 versions prior to 21.2R3-S6;
  *  21.3 versions prior to 21.3R3-S5;
  *  22.1 versions prior to 22.1R3-S3;
  *  22.3 versions prior to 22.3R3;
  *  22.4 versions prior to 22.4R3.







exploits: supportingMedia: base64: no
type: text/html
value: <p>Juniper SIRT is not aware of any malicious exploitation of this vulnerability.</p>
value: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-787
description: CWE-787 Out-of-bounds Write
type: CWE
descriptions: cweId: CWE-121
description: CWE-121 Stack-based Buffer Overflow
type: CWE
descriptions: description: Denial of Service (DoS) 
solutions: supportingMedia: base64: no
type: text/html
value: <p>The following software releases have been updated to resolve this specific issue:&nbsp;<span style="background-color: var(--darkreader-bg--wht);">Junos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 22.1R3-S3, 22.3R3, 22.4R3, 23.2R1, and all subsequent releases.</span></p>
value: The following software releases have been updated to resolve this specific issue: Junos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 22.1R3-S3, 22.3R3, 22.4R3, 23.2R1, and all subsequent releases.


source: advisory: JSA73140
defect: 1720517
discovery: EXTERNAL
timeline: time: 2023-10-11T16:00:00.000Z
value: Initial Publication
title: Junos OS : Stack overflow vulnerability in CLI command processing
workarounds: supportingMedia: base64: no
type: text/html
value: <p>To reduce the risk of malicious exploitation use access lists or firewall filters to limit access to the CLI only from trusted hosts and administrators.<br></p>
value: To reduce the risk of malicious exploitation use access lists or firewall filters to limit access to the CLI only from trusted hosts and administrators.



x_generator: engine: Vulnogram 0.1.0-av217