CVE-2023-22395

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). In an MPLS scenario specific packets destined to an Integrated Routing and Bridging (irb) interface of the device will cause a buffer (mbuf) to leak. Continued receipt of these specific packets will eventually cause a loss of connectivity to and from the device, and requires a reboot to recover. These mbufs can be monitored by using the CLI command 'show system buffers': user@host> show system buffers 783/1497/2280 mbufs in use (current/cache/total) user@host> show system buffers 793/1487/2280 mbufs in use (current/cache/total) <<<<<< mbuf usage increased This issue affects Juniper Networks Junos OS: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2.

• CWE-401
• CWE-401

• https://kb.juniper.net/JSA70191Vendor Advisory
• https://kb.juniper.net/JSA70191Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2239Exposure of Private Personal Information to an Unauthorized …6.5
• CVE-2023-22390Improper buffer restrictions in some Intel(R) Thunderbolt(TM…6.5
• CVE-2023-22391A vulnerability in class-of-service (CoS) queue management i…7.5
• CVE-2023-22392 A Missing Release of Memory after Effective Lifetime vulner…6.5
• CVE-2023-22393An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2023-22394An Improper Handling of Unexpected Data Type vulnerability i…7.5
• CVE-2023-22396An Uncontrolled Resource Consumption vulnerability in TCP pr…7.5
• CVE-2023-22397An Allocation of Resources Without Limits or Throttling weak…6.1
• CVE-2023-22398An Access of Uninitialized Pointer vulnerability in the Rout…5.5
• CVE-2023-22399When sFlow is enabled and it monitors a packet forwarded via…7.5
• CVE-2023-2240Improper Privilege Management in GitHub repository microwebe…8.8
• CVE-2023-22400An Uncontrolled Resource Consumption vulnerability in the PF…7.5