CVE-2023-44192
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-44192 is a memory leak vulnerability in Juniper Networks Junos OS Packet Forwarding Engine. This issue is caused by improper input validation, allowing unauthenticated, network-based attackers to transmit specific DHCP packets that can lead to Denial of Service (DoS) condition. On QFX5000 Series platforms, when pseudo-VTEP is configured under EVPN-VXLAN scenario, the continuous receipt of these packets causes memory leak, eventually reaching 99% and causing protocols to stop working and impacting network traffic. To identify the memory leak, check for "sheaf:possible leak" and "vtep not found" messages in the logs. This vulnerability affects various versions of Junos OS QFX5000 Series, including those prior to 20.4R3-S6, 21.1R3-S5, 21.2R3-S5, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R2-S2, 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, and 22.4R2. A manual reboot of the system can recover from this memory leak.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions