CVE-2023-28965

An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to cause a Denial of Service. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. Storm control monitors the level of applicable incoming traffic and compares it with the level specified. If the combined level of the applicable traffic exceeds the specified level, the switch drops packets for the controlled traffic types. This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2.

• CWE-703
• CWE-754

• https://supportportal.juniper.net/JSA70589Vendor Advisory
• https://supportportal.juniper.net/JSA70589Vendor Advisory

Published

Apr 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2896The WP EasyCart plugin for WordPress is vulnerable to Cross-…4.3
• CVE-2023-28960An Incorrect Permission Assignment for Critical Resource vul…8.2
• CVE-2023-28961An Improper Handling of Unexpected Data Type vulnerability i…5.3
• CVE-2023-28962An Improper Authentication vulnerability in upload-file.php,…9.8
• CVE-2023-28963An Improper Authentication vulnerability in cert-mgmt.php, u…5.3
• CVE-2023-28964An Improper Handling of Length Parameter Inconsistency vulne…7.5
• CVE-2023-28966An Incorrect Default Permissions vulnerability in Juniper Ne…7.8
• CVE-2023-28967A Use of Uninitialized Resource vulnerability in the Border …7.5
• CVE-2023-28968An Improperly Controlled Sequential Memory Allocation vulner…5.3
• CVE-2023-2897The Brizy Page Builder plugin for WordPress is vulnerable to…5.3
• CVE-2023-28970An Improper Check or Handling of Exceptional Conditions vuln…6.5
• CVE-2023-28971An Improper Restriction of Communication Channel to Intended…7.2