CVE-2023-44204

Summary

CVE-2023-44204 is a Denial of Service (DoS) vulnerability affecting Juniper Networks Junos OS and Junos OS Evolved. Malformed BGP UPDATE packets can cause the Routing Protocol Daemon (rpd) to crash and restart, leading to a DoS condition. This issue affects both eBGP and iBGP implementations and impacts various Junos OS and Junos OS Evolved versions. For Junos OS, the affected versions are 21.4 prior to 21.4R3-S4, 22.1 prior to 22.1R3-S3, 22.2 prior to 22.2R3-S2, 22.3 prior to 22.3R2-S2, 22.3R3, 22.4 prior to 22.4R2-S1, and 22.4R3. For Junos OS Evolved, the affected versions are 21.4 prior to 21.4R3-S5-EVO, 22.1 prior to 22.1R3-S3-EVO, 22.2 prior to 22.2R3-S3-EVO, 22.3 prior to 22.3R2-S2-EVO, 22.4 prior to 22.4R3-EVO, and 23.2 prior to 23.2R2-EVO. An unauthenticated, network-based attacker can exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.