CVE-2023-44188

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in telemetry processing of Juniper Networks Junos OS allows a network-based authenticated attacker to flood the system with multiple telemetry requests, causing the Junos Kernel Debugging Streaming Daemon (jkdsd) process to crash, leading to a Denial of Service (DoS). Continued receipt and processing of telemetry requests will repeatedly crash the jkdsd process and sustain the Denial of Service (DoS) condition. This issue is seen on all Junos platforms. The crash is triggered when multiple telemetry requests come from different collectors. As the load increases, the Dynamic Rendering Daemon (drend) decides to defer processing and continue later, which results in a timing issue accessing stale memory, causing the jkdsd process to crash and restart. Note: jkdsd is not shipped with SRX Series devices and therefore are not affected by this vulnerability. This issue affects: Juniper Networks Junos OS: * 20.4 versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S1, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S2, 22.4R3; * 23.1 versions prior to 23.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 19.4R1.

• CWE-367
• CWE-367

• https://supportportal.juniper.net/JSA73152Vendor Advisory
• https://supportportal.juniper.net/JSA73152Vendor Advisory

Published

Oct 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-44182 An Unchecked Return Value vulnerability in the user interfa…8.8
• CVE-2023-44183 An Improper Input Validation vulnerability in the VxLAN pac…5.3
• CVE-2023-44184 An Improper Restriction of Operations within the Bounds of …6.5
• CVE-2023-44185 An Improper Input Validation vulnerability in the routing p…7.5
• CVE-2023-44186 An Improper Handling of Exceptional Conditions vulnerabilit…7.5
• CVE-2023-44187An Exposure of Sensitive Information vulnerability in the 'f…5.5
• CVE-2023-44189 An Origin Validation vulnerability in MAC address validatio…5.4
• CVE-2023-4419The LMS5xx uses hard-coded credentials, which potentially al…8.8
• CVE-2023-44190 An Origin Validation vulnerability in MAC address validatio…5.4
• CVE-2023-44191 An Allocation of Resources Without Limits or Throttling vul…7.5
• CVE-2023-44192 An Improper Input Validation vulnerability in the Packet Fo…7.5
• CVE-2023-44193 An Improper Release of Memory Before Removing Last Referenc…5.5