CVE-2023-44199
Assigner: juniper
Published: 2023-10-12T23:05:52.303Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: MX Series
product: Junos OS
vendor: Juniper Networks
versions: lessThan: 20.4R3-S4
status: affected
version: 0
versionType: semver
lessThan: 21.1*
status: affected
version: 21.1R1
versionType: semver
lessThan: 21.2R3-S2
status: affected
version: 21.2
versionType: semver
lessThan: 21.3R3-S5
status: affected
version: 21.3
versionType: semver
lessThan: 21.4R3
status: affected
version: 21.4
versionType: semver
lessThan: 22.1R3
status: affected
version: 22.1
versionType: semver
lessThan: 22.2R1-S1, 22.2R2
status: affected
version: 22.2
versionType: semver
configurations: supportingMedia: base64: no
type: text/html
value: <p>To be exposed to this issue an FPC must have at least one interface with PTP configured like in the following example:</p> <tt>[ protocols ptp master/slave interface ]</tt>
value: To be exposed to this issue an FPC must have at least one interface with PTP configured like in the following example:

 [ protocols ptp master/slave interface ]
datePublic: 2023-10-11T16:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<p>An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).</p><p>On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart.</p><p>This issue affects Juniper Networks Junos OS on MX Series:</p><p></p><ul><li>All versions prior to 20.4R3-S4;</li><li>21.1 version 21.1R1 and later versions;</li><li>21.2 versions prior to 21.2R3-S2;</li><li>21.3 versions prior to 21.3R3-S5;</li><li>21.4 versions prior to 21.4R3;</li><li>22.1 versions prior to 22.1R3;</li><li>22.2 versions prior to 22.2R1-S1, 22.2R2.</li></ul><p></p>


value: 
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).

On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart.

This issue affects Juniper Networks Junos OS on MX Series:



  *  All versions prior to 20.4R3-S4;
  *  21.1 version 21.1R1 and later versions;
  *  21.2 versions prior to 21.2R3-S2;
  *  21.3 versions prior to 21.3R3-S5;
  *  21.4 versions prior to 21.4R3;
  *  22.1 versions prior to 22.1R3;
  *  22.2 versions prior to 22.2R1-S1, 22.2R2.







exploits: supportingMedia: base64: no
type: text/html
value: <p>Juniper SIRT is not aware of any malicious exploitation of this vulnerability.</p>
value: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-754
description: CWE-754 Improper Check for Unusual or Exceptional Conditions
type: CWE
descriptions: description: Denial of Service (DoS)
solutions: supportingMedia: base64: no
type: text/html
value: <p>The following software releases have been updated to resolve this specific issue: Junos OS 20.4R3-S4, 21.2R3-S2, 21.3R3-S5, 21.4R3, 22.1R3, 22.2R1-S1, 22.2R2, 22.3R1, and all subsequent releases.</p>
value: The following software releases have been updated to resolve this specific issue: Junos OS 20.4R3-S4, 21.2R3-S2, 21.3R3-S5, 21.4R3, 22.1R3, 22.2R1-S1, 22.2R2, 22.3R1, and all subsequent releases.


source: advisory: JSA73165
defect: 1653681
discovery: USER
timeline: time: 2023-10-11T16:00:00.000Z
value: Initial Publication
title: Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot
workarounds: supportingMedia: base64: no
type: text/html
value: <p>There are no known workarounds for this issue.</p>
value: There are no known workarounds for this issue.


x_generator: engine: Vulnogram 0.1.0-av217