CVE-2023-22393

Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon (RPD) crash by sending a BGP route with invalid next-hop resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems without import policy configured. This issue affects: Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R2-S2, 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2; 22.2 versions prior to 22.2R1-S1, 22.2R2. Juniper Networks Junos OS Evolved 21.4-EVO versions prior to 21.4R2-S2-EVO, 21.4R3-EVO; 22.1-EVO versions prior to 22.1R1-S2-EVO, 22.1R2-EVO; 22.2-EVO versions prior to 22.2R1-S1-EVO, 22.2R2-EVO. This issue does not affect: Juniper Networks Junos OS versions prior to 21.1R1. Juniper Networks Junos OS Evolved versions prior to 21.3R1-EVO.

Una vulnerabilidad de comprobación inadecuada de condiciones inusuales o excepcionales en el procesamiento de rutas BGP de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante provocar la caída del Routing PRotocol Daemon (RPD) al enviar una ruta BGP con un siguiente salto no válido, lo que genera una denegación de servicio. (DoS). La recepción y procesamiento continuo de este paquete creará una condición sostenida de Denegación de Servicio (DoS). Este problema solo afecta a los sistemas sin una política de importación configurada. Este problema afecta a: Juniper Networks Junos OS 21.1 versiones anteriores a 21.1R3-S4; Versiones 21.2 anteriores a 21.2R3-S3; Versiones 21.3 anteriores a 21.3R3-S2; Versiones 21.4 anteriores a 21.4R2-S2, 21.4R3; Versiones 22.1 anteriores a 22.1R1-S2, 22.1R2; Versiones 22.2 anteriores a 22.2R1-S1, 22.2R2. Juniper Networks Junos OS Evolved versiones 21.4-EVO anteriores a 21.4R2-S2-EVO, 21.4R3-EVO; Versiones 22.1-EVO anteriores a 22.1R1-S2-EVO, 22.1R2-EVO; Versiones 22.2-EVO anteriores a 22.2R1-S1-EVO, 22.2R2-EVO. Este problema no afecta a: Versiones de Juniper Networks Junos OS anteriores a 21.1R1. Versiones evolucionadas de Juniper Networks Junos OS anteriores a 21.3R1-EVO.

*Credits: N/A

CVSS Scores

NISTv3.1 7.5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-12-27 CVE Reserved
2023-01-12 CVE Published
2024-08-02 CVE Updated
2024-08-04 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-358: Improperly Implemented Security Check for Standard
CWE-754: Improper Check for Unusual or Exceptional Conditions

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://kb.juniper.net/JSA70189	2023-01-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.1 Search vendor "Juniper" for product "Junos" and version "21.1"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.3 Search vendor "Juniper" for product "Junos" and version "21.3"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.4 Search vendor "Juniper" for product "Junos" and version "21.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.1 Search vendor "Juniper" for product "Junos" and version "22.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				22.2 Search vendor "Juniper" for product "Junos" and version "22.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.2"		r1		Affected