CVE-2023-44181

Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment

State: Published
Severity: 7.5 High
Published: Oct 12, 2023
Updated: Sep 18, 2024
Reserved: Sep 26, 2023

Description

An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a l2 loop resulting in a DDOS violations and DDOS syslog.

This issue is triggered when Storm control is enabled and ICMPv6 packets are present on device.

This issue affects Juniper Networks:

Junos OS

* All versions prior to 20.2R3-S6 on QFX5k; * 20.3 versions prior to 20.3R3-S5 on QFX5k; * 20.4 versions prior to 20.4R3-S5 on QFX5k; * 21.1 versions prior to 21.1R3-S4 on QFX5k; * 21.2 versions prior to 21.2R3-S3 on QFX5k; * 21.3 versions prior to 21.3R3-S2 on QFX5k; * 21.4 versions prior to 21.4R3 on QFX5k; * 22.1 versions prior to 22.1R3 on QFX5k; * 22.2 versions prior to 22.2R2 on QFX5k.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Junos OSJuniper Networks	before 20.2R3-S6Affected 20.3 to before 20.3R3-S5Affected 20.4 to before 20.4R3-S5Affected 21.1 to before 21.1R3-S4Affected 21.2 to before 21.2R3-S3Affected 21.3 to before 21.3R3-S2Affected 21.4 to before 21.4R3Affected 22.1 to before 22.1R3Affected 22.2 to before 22.2R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.