CVE-2023-28981

published 2023-04-17

CVE-2023-28981: An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to…

Priority P4 29 medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C N I N A H

An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). If the receipt of router advertisements is enabled on an interface and a specifically malformed RA packet is received, memory corruption will happen which leads to an rpd crash. This issue affects: Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S3; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2. Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S6-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R2-EVO; 22.1-EVO versions prior to 22.1R2-EVO.

Affected

25 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper_networks	junos_os	>= 20.3 < 20.3R3-S5	20.3R3-S5
juniper_networks	junos_os	>= 20.4 < 20.4R3-S3, 20.4R3-S6	20.4R3-S3, 20.4R3-S6
juniper_networks	junos_os	>= 21.1 < 21.1R3-S4	21.1R3-S4
juniper_networks	junos_os	>= 21.2 < 21.2R3	21.2R3
juniper_networks	junos_os	>= 21.3 < 21.3R3	21.3R3
juniper_networks	junos_os	>= 21.4 < 21.4R2	21.4R2
juniper_networks	junos_os	>= 22.1 < 22.1R2	22.1R2
juniper_networks	junos_os_evolved	>= 20.3R1-EVO < 20.3-EVO*	20.3-EVO*
juniper_networks	junos_os_evolved	>= 20.4-EVO < 20.4R3-S6-EVO	20.4R3-S6-EVO
juniper_networks	junos_os_evolved	>= 21.3-EVO < 21.3R3-EVO	21.3R3-EVO
juniper_networks	junos_os_evolved	>= 21.4-EVO < 21.4R2-EVO	21.4R2-EVO
juniper_networks	junos_os_evolved	>= 22.1-EVO < 22.1R2-EVO	22.1R2-EVO

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20