CVE-2023-22398

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS). When an MPLS ping is performed on BGP LSPs, the RPD might crash. Repeated execution of this operation will lead to a sustained DoS. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S12; 19.1 versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R1-S9, 19.2R3-S5; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S4; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R1-S1, 21.1R2; Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R2-EVO.

• CWE-824
• CWE-824

• https://kb.juniper.net/JSA70181Vendor Advisory
• https://kb.juniper.net/JSA70181Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22392 A Missing Release of Memory after Effective Lifetime vulner…6.5
• CVE-2023-22393An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2023-22394An Improper Handling of Unexpected Data Type vulnerability i…7.5
• CVE-2023-22395A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22396An Uncontrolled Resource Consumption vulnerability in TCP pr…7.5
• CVE-2023-22397An Allocation of Resources Without Limits or Throttling weak…6.1
• CVE-2023-22399When sFlow is enabled and it monitors a packet forwarded via…7.5
• CVE-2023-2240Improper Privilege Management in GitHub repository microwebe…8.8
• CVE-2023-22400An Uncontrolled Resource Consumption vulnerability in the PF…7.5
• CVE-2023-22401An Improper Validation of Array Index vulnerability in the A…7.5
• CVE-2023-22402A Use After Free vulnerability in the kernel of Juniper Netw…5.9
• CVE-2023-22403 An Allocation of Resources Without Limits or Throttling vul…7.5