CVE-2023-22403 — Allocation of Resources Without Limits or Throttling in Networks Junos OS

CWE-770 — Allocation of Resources Without Limits or Throttling4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 36.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Juniper Networks Junos OSJuniper Junos
Timeline
PublishedJan 13

Description

An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On QFX10K Series, Inter-Chassis Control Protocol (ICCP) is used in MC-LAG topologies to exchange control information between the devices in the topology. ICCP connection flaps and sync issues will be observed due to excessive specific traffic to the local device. This issue…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5juniper_networks/junos_osunspecified — 20.2R3-S7+6
▶NVDjuniper/junos< 20.2+7

🔴Vulnerability Details

2
GHSA
GHSA-2gch-6fpv-fjxp: An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a netw↗2023-01-13
▶
CVEList
Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic↗2023-01-12
▶

📋Vendor Advisories

1
Juniper
CVE-2023-22403: An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a net↗2023-01-13
▶
CVE-2023-22403 — Networks Junos OS vulnerability | cvebase