Riskcovery

CVE-2023-36833

Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps

State
Published
Severity
6.5 Medium
Published
Jul 14, 2023
Updated
Oct 22, 2024
Reserved
Jun 27, 2023

Read the record on cve.org

Description

A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS).

The process 'aftman-bt' will crash after multiple flaps on a multicast-only fast reroute (MoFRR) enabled interface. This will cause the respective FPC to stop forwarding traffic and it needs to be rebooted to restore the service.

An indication that the system experienced this issue is the following log message:

<date> <hostname> evo-aftmand-bt[<pid>]: [Error] jexpr_fdb: sanity check failed, ... , app_name L3 Mcast Routes

This issue affects Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10004, PTX10008, PTX10016 with LC1201/1202: 21.2 version 21.2R1-EVO and later versions; 21.3 version 21.3R1-EVO and later versions; 21.4 versions prior to 21.4R3-S3-EVO; 22.1 version 22.1R1-EVO and later versions; 22.2 versions prior to 22.2R3-S2-EVO; 22.3 versions prior to 22.3R3-EVO; 22.4 versions prior to 22.4R1-S2-EVO, 22.4R2-EVO.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

Affected Products

ProductVersions
Junos OS EvolvedJuniper Networks
  • 21.2 to before 21.2*Affectedfrom 21.2R1-EVOAffected
  • 21.3 to before 21.3*Affectedfrom 21.3R1-EVOAffected
  • 21.4 to before 21.4R3-S3-EVOAffected
  • 22.1 to before 22.1*Affectedfrom 22.1R1-EVOAffected
  • 22.2 to before 22.2R3-S2-EVOAffected
  • 22.3 to before 22.3R3-EVOAffected
  • 22.4 to before 22.4R1-S2-EVO, 22.4R2-EVOAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.