CVE-2023-22417

A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). In an IPsec VPN environment, a memory leak will be seen if a DH or ECDH group is configured. Eventually the flowd process will crash and restart. This issue affects Juniper Networks Junos OS on SRX Series: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S8, 19.4R3-S10; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2.

• CWE-401
• CWE-401

• https://kb.juniper.net/JSA70213Vendor Advisory
• https://kb.juniper.net/JSA70213Vendor Advisory

Published

Jan 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22411An Out-of-Bounds Write vulnerability in Flow Processing Daem…7.5
• CVE-2023-22412An Improper Locking vulnerability in the SIP ALG of Juniper …7.5
• CVE-2023-22413An Improper Check or Handling of Exceptional Conditions vuln…7.5
• CVE-2023-22414A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22415An Out-of-Bounds Write vulnerability in the H.323 ALG of Jun…7.5
• CVE-2023-22416A Buffer Overflow vulnerability in SIP ALG of Juniper Networ…7.5
• CVE-2023-22418On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, …6.1
• CVE-2023-22419Out-of-bounds read vulnerability exists in Kostac PLC Progra…7.8
• CVE-2023-2242A vulnerability has been found in SourceCodester Online Comp…8.8
• CVE-2023-22421Out-of-bounds read vulnerability exists in Kostac PLC Progra…7.8
• CVE-2023-22422On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before …7.5
• CVE-2023-22424Use-after-free vulnerability exists in Kostac PLC Programmin…7.8