CVE-2023-44198

published 2023-10-13

CVE-2023-44198: An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an…

Priority P3 46 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I H A N

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks.

If the SIP ALG is configured and a device receives a specifically malformed SIP packet, the device prevents this packet from being forwarded, but any subsequently received retransmissions of the same packet are forwarded as if they were valid.

This issue affects Juniper Networks Junos OS on SRX Series and MX Series:

* 20.4 versions prior to 20.4R3-S5;
* 21.1 versions prior to 21.1R3-S4;
* 21.2 versions prior to 21.2R3-S4;
* 21.3 versions prior to 21.3R3-S3;
* 21.4 versions prior to 21.4R3-S2;
* 22.1 versions prior to 22.1R2-S2, 22.1R3;
* 22.2 versions prior to 22.2R2-S1, 22.2R3;
* 22.3 versions prior to 22.3R1-S2, 22.3R2.

This issue doesn't not affected releases prior to 20.4R1.

Affected

21 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	< 20.4	20.4
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	mx_series	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	< 20.4R1	20.4R1
juniper_networks	junos_os	>= 20.4 < 20.4R3-S5	20.4R3-S5
juniper_networks	junos_os	>= 21.1 < 21.1R3-S4	21.1R3-S4
juniper_networks	junos_os	>= 21.2 < 21.2R3-S4	21.2R3-S4
juniper_networks	junos_os	>= 21.3 < 21.3R3-S3	21.3R3-S3
juniper_networks	junos_os	>= 21.4 < 21.4R3-S2	21.4R3-S2
juniper_networks	junos_os	>= 22.1 < 22.1R2-S2, 22.1R3	22.1R2-S2, 22.1R3
juniper_networks	junos_os	>= 22.2 < 22.2R2-S1, 22.2R3	22.2R2-S1, 22.2R3
juniper_networks	junos_os	>= 22.3 < 22.3R1-S2, 22.3R2	22.3R1-S2, 22.3R2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-754