CVE-2023-22391

A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly routed to a queue used for other high-priority traffic such as BGP, PIM, ICMP, ICMPV6 ND and ISAKMP. Due to this misclassification of traffic, receipt of a high rate of these specific packets will cause delays in the processing of other traffic, leading to a Denial of Service (DoS). Continued receipt of this amount of traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on ACX2K Series: All versions prior to 19.4R3-S9; All 20.2 versions; 20.3 versions prior to 20.3R3-S6 on ACX2K Series; 20.4 versions prior to 20.4R3-S4 on ACX2K Series; All 21.1 versions; 21.2 versions prior to 21.2R3-S3 on ACX2K Series. Note: This issues affects legacy ACX2K Series PPC-based devices. This platform reached Last Supported Version (LSV) as of the Junos OS 21.2 Release.

• CWE-755
• CWE-755

• https://kb.juniper.net/JSA70187Vendor Advisory
• https://kb.juniper.net/JSA70187Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22386Memory Corruption in WLAN HOST while processing WLAN FW requ…7.8
• CVE-2023-22387Arbitrary memory overwrite when VM gets compromised in TX wr…7.8
• CVE-2023-22388Memory Corruption in Multi-mode Call Processor while process…9.8
• CVE-2023-22389 Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior s…6.5
• CVE-2023-2239Exposure of Private Personal Information to an Unauthorized …6.5
• CVE-2023-22390Improper buffer restrictions in some Intel(R) Thunderbolt(TM…6.5
• CVE-2023-22392 A Missing Release of Memory after Effective Lifetime vulner…6.5
• CVE-2023-22393An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2023-22394An Improper Handling of Unexpected Data Type vulnerability i…7.5
• CVE-2023-22395A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22396An Uncontrolled Resource Consumption vulnerability in TCP pr…7.5
• CVE-2023-22397An Allocation of Resources Without Limits or Throttling weak…6.1