Riskcovery

CVE-2023-44198

Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

State
Published
Severity
5.8 Medium
Published
Oct 12, 2023
Updated
Sep 18, 2024
Reserved
Sep 26, 2023

Read the record on cve.org

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks.

If the SIP ALG is configured and a device receives a specifically malformed SIP packet, the device prevents this packet from being forwarded, but any subsequently received retransmissions of the same packet are forwarded as if they were valid.

This issue affects Juniper Networks Junos OS on SRX Series and MX Series:

* 20.4 versions prior to 20.4R3-S5; * 21.1 versions prior to 21.1R3-S4; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S3; * 21.4 versions prior to 21.4R3-S2; * 22.1 versions prior to 22.1R2-S2, 22.1R3; * 22.2 versions prior to 22.2R2-S1, 22.2R3; * 22.3 versions prior to 22.3R1-S2, 22.3R2.

This issue doesn't not affected releases prior to 20.4R1.

Scores

CVSSScoreVectorSource
3.15.8 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:Njuniper

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 20.4 to before 20.4R3-S5Affected
  • 21.1 to before 21.1R3-S4Affected
  • 21.2 to before 21.2R3-S4Affected
  • 21.3 to before 21.3R3-S3Affected
  • 21.4 to before 21.4R3-S2Affected
  • 22.1 to before 22.1R2-S2, 22.1R3Affected
  • 22.2 to before 22.2R2-S1, 22.2R3Affected
  • 22.3 to before 22.3R1-S2, 22.3R2Affected
  • before 20.4R1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.