CVE-2023-28970

An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by an attacker on the local broadcast domain. Packets routed to the device are unable to trigger this crash. This issue affects Juniper Networks Junos OS on JRR200: All versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S4; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S2, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2; 22.4 versions prior to 22.4R1-S1, 22.4R2.

• CWE-703
• CWE-755

• https://supportportal.juniper.net/JSA70594Vendor Advisory
• https://supportportal.juniper.net/JSA70594Vendor Advisory

Published

Apr 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28964An Improper Handling of Length Parameter Inconsistency vulne…7.5
• CVE-2023-28965An Improper Check or Handling of Exceptional Conditions with…7.5
• CVE-2023-28966An Incorrect Default Permissions vulnerability in Juniper Ne…7.8
• CVE-2023-28967A Use of Uninitialized Resource vulnerability in the Border …7.5
• CVE-2023-28968An Improperly Controlled Sequential Memory Allocation vulner…5.3
• CVE-2023-2897The Brizy Page Builder plugin for WordPress is vulnerable to…5.3
• CVE-2023-28971An Improper Restriction of Communication Channel to Intended…7.2
• CVE-2023-28972An Improper Link Resolution Before File Access vulnerability…6.8
• CVE-2023-28973An Improper Authorization vulnerability in the 'sysmanctl' s…7.1
• CVE-2023-28974An Improper Check for Unusual or Exceptional Conditions vuln…6.5
• CVE-2023-28975An Unexpected Status Code or Return Value vulnerability in t…4.6
• CVE-2023-28976An Improper Check for Unusual or Exceptional Conditions vuln…7.5