Riskcovery

CVE-2023-28981

Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash

State
Published
Severity
6.5 Medium
Published
Apr 17, 2023
Updated
Feb 5, 2025
Reserved
Mar 29, 2023

Read the record on cve.org

Description

An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). If the receipt of router advertisements is enabled on an interface and a specifically malformed RA packet is received, memory corruption will happen which leads to an rpd crash. This issue affects: Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S3; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2. Juniper Networks Junos OS Evolved 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S6-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R2-EVO; 22.1-EVO versions prior to 22.1R2-EVO.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 20.3 to before 20.3R3-S5Affected
  • 20.4 to before 20.4R3-S3, 20.4R3-S6Affected
  • 21.1 to before 21.1R3-S4Affected
  • 21.2 to before 21.2R3Affected
  • 21.3 to before 21.3R3Affected
  • 21.4 to before 21.4R2Affected
  • 22.1 to before 22.1R2Affected
Junos OS EvolvedJuniper Networks
  • 20.3R1-EVO to before 20.3-EVO*Affected
  • 20.4-EVO to before 20.4R3-S6-EVOAffected
  • 21.3-EVO to before 21.3R3-EVOAffected
  • 21.4-EVO to before 21.4R2-EVOAffected
  • 22.1-EVO to before 22.1R2-EVOAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.