CVE-2023-22392

Summary

CVE-2023-22392 is a vulnerability affecting Juniper Networks Junos OS in specific models, including PTX3000, PTX5000, QFX10000, PTX1000, PTX10002, and PTX10004, PTX10008, and PTX10016 with LC110x FPCs. This issue arises from a missing release of memory after effective lifetime in the Packet Forwarding Engine (PFE), enabling an unauthenticated adjacent attacker to cause a Denial of Service (DoS). The vulnerability is triggered when an attempt is made to install a filter derived from a flow-route, resulting in FPC heap memory leakage, which can be monitored using the "show chassis fpc" CLI command. Affected Junos OS versions include all releases prior to 20.4R3-S5 for certain models and specific versions for others.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.