CVE-2023-28964

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause an RPD crash leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Upon receipt of a malformed BGP flowspec update, RPD will crash resulting in a Denial of Service. This issue affects Juniper Networks Junos OS: All versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2; Juniper Networks Junos OS Evolved: All versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R2-EVO; 20.3 versions prior to 20.3R2-EVO;

• CWE-130

• https://supportportal.juniper.net/JSA70588Vendor Advisory
• https://supportportal.juniper.net/JSA70588Vendor Advisory

Published

Apr 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28959An Improper Check or Handling of Exceptional Conditions vuln…6.5
• CVE-2023-2896The WP EasyCart plugin for WordPress is vulnerable to Cross-…4.3
• CVE-2023-28960An Incorrect Permission Assignment for Critical Resource vul…8.2
• CVE-2023-28961An Improper Handling of Unexpected Data Type vulnerability i…5.3
• CVE-2023-28962An Improper Authentication vulnerability in upload-file.php,…9.8
• CVE-2023-28963An Improper Authentication vulnerability in cert-mgmt.php, u…5.3
• CVE-2023-28965An Improper Check or Handling of Exceptional Conditions with…7.5
• CVE-2023-28966An Incorrect Default Permissions vulnerability in Juniper Ne…7.8
• CVE-2023-28967A Use of Uninitialized Resource vulnerability in the Border …7.5
• CVE-2023-28968An Improperly Controlled Sequential Memory Allocation vulner…5.3
• CVE-2023-2897The Brizy Page Builder plugin for WordPress is vulnerable to…5.3
• CVE-2023-28970An Improper Check or Handling of Exceptional Conditions vuln…6.5