CVE-2023-44199
Last modified
CVE-2023-44199 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart. This issue affects Juniper Networks Junos OS on MX Series: * All versions prior to 20.4R3-S4; * 21.1 version 21.1R1 and later versions; * 21.2 versions prior to 21.2R3-S2; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3; * 22.1 versions prior to 22.1R3; * 22.2 versions prior to 22.2R1-S1, 22.2R2. . EPSS estimates a 0.54% chance of exploitation in the next 30 days.
Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart. This issue affects Juniper Networks Junos OS on MX Series: * All versions prior to 20.4R3-S4; * 21.1 version 21.1R1 and later versions; * 21.2 versions prior to 21.2R3-S2; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3; * 22.1 versions prior to 22.1R3; * 22.2 versions prior to 22.2R1-S1, 22.2R2.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos | < 20.4 | — |
| Juniper | Junos | 20.4 | — |
| Juniper | Junos | 21.1 | R1 |
| Juniper | Junos | 21.2 | — |
| Juniper | Junos | 21.3 | — |
| Juniper | Junos | 21.4 | — |
| Juniper | Junos | 22.1 | — |
| Juniper | Junos | 22.2 | — |
References
- https://supportportal.juniper.net/JSA73165Vendor Advisory
- https://supportportal.juniper.net/JSA73165Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-44199?
How severe is CVE-2023-44199?
How do I fix CVE-2023-44199?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-44193 An Improper Release of Memory Before Removing Last Referenc…5.5
- CVE-2023-44194 An Incorrect Default Permissions vulnerability in Juniper N…7.8
- CVE-2023-44195 An Improper Restriction of Communication Channel to Intende…5.3
- CVE-2023-44196 An Improper Check for Unusual or Exceptional Conditions in …6.5
- CVE-2023-44197 An Out-of-Bounds Write vulnerability in the Routing Protoco…7.5
- CVE-2023-44198 An Improper Check for Unusual or Exceptional Conditions vul…7.5
- CVE-2023-4420A remote unprivileged attacker can intercept the communicati…7.4
- CVE-2023-44201 An Incorrect Permission Assignment for Critical Resource vu…5.5
- CVE-2023-44203 An Improper Check or Handling of Exceptional Conditions vul…6.5
- CVE-2023-44204 An Improper Validation of Syntactic Correctness of Input vu…6.5
- CVE-2023-44205Sensitive information disclosure due to improper authorizati…5.3
- CVE-2023-44206Sensitive information disclosure and manipulation due to imp…9.1
Are you affected by CVE-2023-44199?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST