CVE-2023-44188

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Oct 11, 2023
Updated: Feb 21, 2024
CWE ID 367

Summary

CVE-2023-44188 is a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Juniper Networks Junos OS. A network-authenticated attacker can cause a Denial of Service (DoS) by flooding the system with multiple telemetry requests, leading to repeated crashes of the Junos Kernel Debugging Streaming Daemon (jkdsd) process. This issue occurs due to a timing issue accessing stale memory, and affects various Junos OS versions, including 20.4, 21.1, 21.2, 21.3, 21.4, 22.1, 22.2, 22.3, and 23.1. Versions prior to 19.4R1 are not affected.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Juniper Junos

Affected Vendors

  • Juniper Networks