NA

CVE-2023-22398

Published: 13/01/2023 Updated: 24/01/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS). When an MPLS ping is performed on BGP LSPs, the RPD might crash. Repeated execution of this operation will lead to a sustained DoS. This issue affects: Juniper Networks Junos OS: 15.1 versions before 15.1R7-S12; 19.1 versions before 19.1R3-S9; 19.2 versions before 19.2R1-S9, 19.2R3-S5; 19.3 versions before 19.3R3-S6; 19.4 versions before 19.4R2-S7, 19.4R3-S8; 20.1 versions before 20.1R3-S4; 20.2 versions before 20.2R3-S5; 20.3 versions before 20.3R3-S5; 20.4 versions before 20.4R3-S4; 21.1 versions before 21.1R1-S1, 21.1R2; Juniper Networks Junos OS Evolved: All versions before 20.4R3-S4; 21.1 versions before 21.1R2-EVO.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 15.1

juniper junos 19.1

juniper junos 19.2

juniper junos 19.3

juniper junos 19.4

juniper junos 20.1

juniper junos 20.2

juniper junos 20.3

juniper junos 20.4

juniper junos os evolved 20.4

juniper junos 21.1

juniper junos os evolved 21.1