ID
VAR-202301-0903
CVE
CVE-2023-22406
TITLE
Juniper Networks Junos OS and Junos OS Evolved Vulnerability regarding lack of memory release after expiration in
Trust: 0.8
DESCRIPTION
A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flaps, next-hop churn will happen and a continuous increase in Routing Protocol Daemon (rpd) memory consumption will be observed. This will eventually lead to an rpd crash and restart when the memory is full. The memory consumption can be monitored using the CLI command "show task memory detail" as shown in the following example: user@host> show task memory detail | match "RT_NEXTHOPS_TEMPLATE|RT_TEMPLATE_BOOK_KEE" RT_NEXTHOPS_TEMPLATE 1008 1024 T 50 51200 50 51200 RT_NEXTHOPS_TEMPLATE 688 768 T 50 38400 50 38400 RT_NEXTHOPS_TEMPLATE 368 384 T 412330 158334720 412330 158334720 RT_TEMPLATE_BOOK_KEE 2064 2560 T 33315 85286400 33315 85286400 user@host> show task memory detail | match "RT_NEXTHOPS_TEMPLATE|RT_TEMPLATE_BOOK_KEE" RT_NEXTHOPS_TEMPLATE 1008 1024 T 50 51200 50 51200 RT_NEXTHOPS_TEMPLATE 688 768 T 50 38400 50 38400 RT_NEXTHOPS_TEMPLATE 368 384 T 419005 160897920 419005 160897920 <=== RT_TEMPLATE_BOOK_KEE 2064 2560 T 39975 102336000 39975 10233600 <=== This issue affects: Juniper Networks Junos OS All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S8, 19.4R3-S9; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S4-EVO; 21.4 versions prior to 21.4R2-S1-EVO, 21.4R3-EVO; 22.1 versions prior to 22.1R2-EVO
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | juniper | model: | junos | scope: | eq | version: | 19.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 19.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 21.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 21.2 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 20.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 20.2 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 20.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | lt | version: | 19.3 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 22.1 | Trust: 1.0 |
| vendor: | juniper | model: | junos os evolved | scope: | eq | version: | 20.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos os evolved | scope: | lt | version: | 20.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos os evolved | scope: | eq | version: | 22.1 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 21.4 | Trust: 1.0 |
| vendor: | juniper | model: | junos | scope: | eq | version: | 21.1 | Trust: 1.0 |
| vendor: | juniper | model: | junos os evolved | scope: | eq | version: | 21.4 | Trust: 1.0 |
| vendor: | ジュニパーネットワークス | model: | junos os evolved | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ジュニパーネットワークス | model: | junos os | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-401 | Trust: 1.1 |
| problemtype: | Lack of memory release after expiration (CWE-401) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote or local
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | JSA70202 | url: | https://kb.juniper.net/JSA70202 | Trust: 0.8 |
| title: | Juniper Networks Junos OS Security vulnerabilities | url: | http://123.124.177.30/web/xxk/bdxqById.tag?id=221272 | Trust: 0.6 |
| title: | - | url: | https://github.com/Live-Hack-CVE/CVE-2023-22406 | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2023-22406 | Trust: 3.4 |
| db: | JUNIPER | id: | JSA70202 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2023-001515 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202301-1032 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-449822 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2023-22406 | Trust: 0.1 |
REFERENCES
| url: | https://kb.juniper.net/jsa70202 | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2023-22406 | Trust: 0.8 |
| url: | https://cxsecurity.com/cveshow/cve-2023-22406/ | Trust: 0.6 |
| url: | https://github.com/live-hack-cve/cve-2023-22406 | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | VULHUB | id: | VHN-449822 |
| db: | VULMON | id: | CVE-2023-22406 |
| db: | JVNDB | id: | JVNDB-2023-001515 |
| db: | CNNVD | id: | CNNVD-202301-1032 |
| db: | NVD | id: | CVE-2023-22406 |
LAST UPDATE DATE
2024-08-14T15:05:56.740000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-449822 | date: | 2023-01-24T00:00:00 |
| db: | VULMON | id: | CVE-2023-22406 | date: | 2023-01-13T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-001515 | date: | 2023-04-17T02:52:00 |
| db: | CNNVD | id: | CNNVD-202301-1032 | date: | 2023-01-28T00:00:00 |
| db: | NVD | id: | CVE-2023-22406 | date: | 2023-01-24T18:33:08.510 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-449822 | date: | 2023-01-13T00:00:00 |
| db: | VULMON | id: | CVE-2023-22406 | date: | 2023-01-13T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-001515 | date: | 2023-04-17T00:00:00 |
| db: | CNNVD | id: | CNNVD-202301-1032 | date: | 2023-01-13T00:00:00 |
| db: | NVD | id: | CVE-2023-22406 | date: | 2023-01-13T00:15:10.990 |