Sign-up

ID

VAR-202301-1031


CVE

CVE-2023-22407


TITLE

Juniper Networks Junos OS  and  Junos OS Evolved  Incomplete Cleanup Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2023-001514

DESCRIPTION

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected router. This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S7; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2. Juniper Networks Junos OS Evolved All versions prior to 19.2R3-EVO; 19.3 versions prior to 19.3R3-EVO; 19.4 versions prior to 19.4R3-EVO; 20.1 versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R2-EVO

Trust: 1.8

sources: NVD: CVE-2023-22407 // JVNDB: JVNDB-2023-001514 // VULHUB: VHN-449823 // VULMON: CVE-2023-22407

AFFECTED PRODUCTS

vendor:junipermodel:junos os evolvedscope:eqversion:19.2

Trust: 1.0

vendor:junipermodel:junos os evolvedscope:eqversion:19.3

Trust: 1.0

vendor:junipermodel:junos os evolvedscope:ltversion:19.2

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:20.1

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:19.4

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:19.1

Trust: 1.0

vendor:junipermodel:junos os evolvedscope:eqversion:20.1

Trust: 1.0

vendor:junipermodel:junos os evolvedscope:eqversion:19.4

Trust: 1.0

vendor:junipermodel:junosscope:ltversion:18.4

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:20.2

Trust: 1.0

vendor:junipermodel:junos os evolvedscope:eqversion:20.2

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:18.4

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:19.2

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:19.3

Trust: 1.0

vendor:ジュニパーネットワークスmodel:junos os evolvedscope: - version: -

Trust: 0.8

vendor:ジュニパーネットワークスmodel:junos osscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2023-001514 // NVD: CVE-2023-22407

CVSS

SEVERITY

CVSSV2

CVSSV3

sirt@juniper.net: CVE-2023-22407
value: MEDIUM

Trust: 1.0

OTHER: JVNDB-2023-001514
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202301-1034
value: MEDIUM

Trust: 0.6

sirt@juniper.net: CVE-2023-22407
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 3.6
version: 3.1

Trust: 1.0

OTHER: JVNDB-2023-001514
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2023-001514 // CNNVD: CNNVD-202301-1034 // NVD: CVE-2023-22407

PROBLEMTYPE DATA

problemtype:CWE-459

Trust: 1.1

problemtype:incomplete cleanup (CWE-459) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-449823 // JVNDB: JVNDB-2023-001514 // NVD: CVE-2023-22407

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202301-1034

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202301-1034

PATCH

title:JSA70203url:https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-RPD-crash-can-happen-due-to-an-MPLS-TE-tunnel-configuration-change-on-a-directly-connected-router-CVE-2023-22407?language=en_US

Trust: 0.8

title:Juniper Networks Junos OS Security vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=221274

Trust: 0.6

title: - url:https://github.com/Live-Hack-CVE/CVE-2023-22407

Trust: 0.1

sources: VULMON: CVE-2023-22407 // JVNDB: JVNDB-2023-001514 // CNNVD: CNNVD-202301-1034

EXTERNAL IDS

db:NVDid:CVE-2023-22407

Trust: 3.4

db:JUNIPERid:JSA70203

Trust: 1.8

db:JVNDBid:JVNDB-2023-001514

Trust: 0.8

db:CNNVDid:CNNVD-202301-1034

Trust: 0.6

db:VULHUBid:VHN-449823

Trust: 0.1

db:VULMONid:CVE-2023-22407

Trust: 0.1

sources: VULHUB: VHN-449823 // VULMON: CVE-2023-22407 // JVNDB: JVNDB-2023-001514 // CNNVD: CNNVD-202301-1034 // NVD: CVE-2023-22407

REFERENCES

url:https://kb.juniper.net/jsa70203

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2023-22407

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2023-22407/

Trust: 0.6

url:https://github.com/live-hack-cve/cve-2023-22407

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULHUB: VHN-449823 // VULMON: CVE-2023-22407 // JVNDB: JVNDB-2023-001514 // CNNVD: CNNVD-202301-1034 // NVD: CVE-2023-22407

SOURCES

db:VULHUBid:VHN-449823
db:VULMONid:CVE-2023-22407
db:JVNDBid:JVNDB-2023-001514
db:CNNVDid:CNNVD-202301-1034
db:NVDid:CVE-2023-22407

LAST UPDATE DATE

2024-08-14T13:21:15.186000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-449823date:2023-01-20T00:00:00
db:VULMONid:CVE-2023-22407date:2023-01-13T00:00:00
db:JVNDBid:JVNDB-2023-001514date:2023-04-17T02:50:00
db:CNNVDid:CNNVD-202301-1034date:2023-01-28T00:00:00
db:NVDid:CVE-2023-22407date:2023-01-20T07:57:49.667

SOURCES RELEASE DATE

db:VULHUBid:VHN-449823date:2023-01-13T00:00:00
db:VULMONid:CVE-2023-22407date:2023-01-13T00:00:00
db:JVNDBid:JVNDB-2023-001514date:2023-04-17T00:00:00
db:CNNVDid:CNNVD-202301-1034date:2023-01-13T00:00:00
db:NVDid:CVE-2023-22407date:2023-01-13T00:15:11.077