CVE-2023-36831

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jul 14, 2023
Updated: Jul 26, 2023
CWE ID 703

Summary

CVE-2023-36831 is an Improper Check or Handling of Exceptional Conditions vulnerability that affects the UTM Web-Filtering feature of Juniper Networks Junos OS on SRX Series. This issue leads to a jbuf memory leak when accessing certain websites, resulting in a Denial of Service (DoS) condition. The vulnerability is only present in SSL Proxy and UTM Web-Filtering configurations and impacts Juniper Networks Junos OS on SRX Series in versions 22.2 prior to 22.2R3, 22.3 prior to 22.3R2-S1 and 22.3R3, and 22.4 prior to 22.4R1-S2 and 22.4R2. Service restoration requires a system reboot. Juniper Networks Junos OS versions prior to 22.2R2 are not affected by this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Juniper Junos

Affected Vendors

  • Juniper Networks