CVE-2023-22407

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected router. This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S7; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2. Juniper Networks Junos OS Evolved All versions prior to 19.2R3-EVO; 19.3 versions prior to 19.3R3-EVO; 19.4 versions prior to 19.4R3-EVO; 20.1 versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R2-EVO.

• CWE-459
• CWE-459

• https://kb.juniper.net/JSA70203Vendor Advisory
• https://kb.juniper.net/JSA70203Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22401An Improper Validation of Array Index vulnerability in the A…7.5
• CVE-2023-22402A Use After Free vulnerability in the kernel of Juniper Netw…5.9
• CVE-2023-22403 An Allocation of Resources Without Limits or Throttling vul…7.5
• CVE-2023-22404An Out-of-bounds Write vulnerability in the Internet Key Exc…6.5
• CVE-2023-22405An Improper Preservation of Consistency Between Independent …6.5
• CVE-2023-22406A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22408An Improper Validation of Array Index vulnerability in the S…7.5
• CVE-2023-22409An Unchecked Input for Loop Condition vulnerability in a NAT…5.5
• CVE-2023-2241A vulnerability, which was classified as critical, was found…5.3
• CVE-2023-22410A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22411An Out-of-Bounds Write vulnerability in Flow Processing Daem…7.5
• CVE-2023-22412An Improper Locking vulnerability in the SIP ALG of Juniper …7.5