Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2023-28967

A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to send specific genuine BGP packets to a device configured with BGP to cause a Denial of Service (DoS) by crashing the Routing Protocol Daemon (rpd). This issue is triggered when the packets attempt to initiate a BGP connection before a BGP session is successfully established. Continued receipt of these specific BGP packets will cause a sustained Denial of Service condition. This issue is triggerable in both iBGP and eBGP deployments. This issue affects: Juniper Networks Junos OS 21.1 version 21.1R1 and later versions prior to 21.1R3-S5; 21.2 version 21.2R1 and later versions prior to 21.2R3-S2; 21.3 version 21.3R1 and later versions prior to 21.3R3-S2; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R3; 22.2 versions prior to 22.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 21.1R1. This issue affects: Juniper Networks Junos OS Evolved 21.1-EVO version 21.1R1-EVO and later versions prior to 21.4R3-EVO; 22.1-EVO versions prior to 22.1R3-EVO; 22.2-EVO versions prior to 22.2R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.1R1-EVO.

  • Published: Apr 18, 2023
  • Updated: Apr 18, 2023
  • CVE: CVE-2023-28967
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
juniper / junos_os_evolved 21.1-r1 21.1-r1.x
juniper / junos_os_evolved 21.1-r2 21.1-r2.x
juniper / junos_os_evolved 21.1-r1-s1 21.1-r1-s1.x
juniper / junos_os_evolved 21.2-r1 21.2-r1.x
juniper / junos_os_evolved 21.2-r1-s1 21.2-r1-s1.x
juniper / junos_os_evolved 21.2-r2 21.2-r2.x
juniper / junos_os_evolved 21.1 21.1.x
juniper / junos_os_evolved 21.3-r1 21.3-r1.x
juniper / junos_os_evolved 21.2 21.2.x
juniper / junos_os_evolved 21.2-r1-s2 21.2-r1-s2.x
juniper / junos_os_evolved 21.2-r2-s1 21.2-r2-s1.x
juniper / junos_os_evolved 21.3-r1-s1 21.3-r1-s1.x
juniper / junos_os_evolved 21.4-r1 21.4-r1.x
juniper / junos_os_evolved 21.4-r1-s1 21.4-r1-s1.x
juniper / junos_os_evolved 21.2-r2-s2 21.2-r2-s2.x
juniper / junos_os_evolved 21.1-r3 21.1-r3.x
juniper / junos_os_evolved 21.2-r3 21.2-r3.x
juniper / junos_os_evolved 21.3-r2 21.3-r2.x
juniper / junos_os_evolved 21.3 21.3.x
juniper / junos_os_evolved 21.4 21.4.x
juniper / junos_os_evolved 21.1-r3-s1 21.1-r3-s1.x
juniper / junos_os_evolved 22.1-r1 22.1-r1.x
juniper / junos_os_evolved 21.3-r2-s1 21.3-r2-s1.x
juniper / junos_os_evolved 21.3-r2-s2 21.3-r2-s2.x
juniper / junos_os_evolved 21.4-r2 21.4-r2.x
juniper / junos_os_evolved 21.4-r2-s1 21.4-r2-s1.x
juniper / junos_os_evolved 21.4-r2-s2 21.4-r2-s2.x
juniper / junos_os_evolved 22.1-r1-s1 22.1-r1-s1.x
juniper / junos_os_evolved 22.1-r1-s2 22.1-r1-s2.x
juniper / junos_os_evolved 21.4-r1-s2 21.4-r1-s2.x
juniper / junos_os_evolved 22.2-r1-s1 22.2-r1-s1.x
juniper / junos_os_evolved 22.2-r1 22.2-r1.x
juniper / junos_os_evolved 21.2-r3-s1 21.2-r3-s1.x
juniper / junos_os_evolved 21.3-r3 21.3-r3.x
juniper / junos_os_evolved 22.1-r2 22.1-r2.x
juniper / junos_os_evolved 21.2-r3-s2 21.2-r3-s2.x
juniper / junos_os_evolved 21.2-r3-s3 21.2-r3-s3.x
juniper / junos_os_evolved 21.1-r3-s2 21.1-r3-s2.x
juniper / junos_os_evolved 21.1-r3-s3 21.1-r3-s3.x
juniper / junos_os_evolved 21.2-r3-s4 21.2-r3-s4.x
juniper / junos_os_evolved 21.3-r3-s1 21.3-r3-s1.x
juniper / junos_os_evolved 21.3-r3-s2 21.3-r3-s2.x
juniper / junos_os_evolved 21.3-r3-s3 21.3-r3-s3.x
juniper / junos_os_evolved 22.1-r2-s1 22.1-r2-s1.x
juniper / junos_os_evolved 21.2-r3-s5 21.2-r3-s5.x
juniper / junos_os_evolved 21.3-r3-s4 21.3-r3-s4.x
juniper / junos 21.1-r1 21.1-r1.x
juniper / junos 21.2-r1 21.2-r1.x
juniper / junos 21.1-r1-s1 21.1-r1-s1.x
juniper / junos 21.2-r1-s1 21.2-r1-s1.x
juniper / junos 21.1-r2 21.1-r2.x
juniper / junos 21.3-r1 21.3-r1.x
juniper / junos 21.3-r2 21.3-r2.x
juniper / junos 21.2-r2 21.2-r2.x
juniper / junos 21.1-r3 21.1-r3.x
juniper / junos 21.1-r2-s1 21.1-r2-s1.x
juniper / junos 21.2 21.2.x
juniper / junos 21.1 21.1.x
juniper / junos 21.1-r2-s2 21.1-r2-s2.x
juniper / junos 21.2-r1-s2 21.2-r1-s2.x
juniper / junos 21.2-r2-s1 21.2-r2-s1.x
juniper / junos 21.2-r2-s2 21.2-r2-s2.x
juniper / junos 21.4-r1-s1 21.4-r1-s1.x
juniper / junos 21.3-r1-s1 21.3-r1-s1.x
juniper / junos 21.3-r1-s2 21.3-r1-s2.x
juniper / junos 21.4-r1 21.4-r1.x
juniper / junos 21.3-r2-s1 21.3-r2-s1.x
juniper / junos 21.3-r2-s2 21.3-r2-s2.x
juniper / junos 21.4-r1-s2 21.4-r1-s2.x
juniper / junos 21.1-r3-s1 21.1-r3-s1.x
juniper / junos 21.2-r3 21.2-r3.x
juniper / junos 22.1-r1 22.1-r1.x
juniper / junos 21.3-r3 21.3-r3.x
juniper / junos 21.3-r3-s1 21.3-r3-s1.x
juniper / junos 21.4-r2 21.4-r2.x
juniper / junos 21.4-r2-s1 21.4-r2-s1.x
juniper / junos 21.4 21.4.x
juniper / junos 21.3 21.3.x
juniper / junos 21.1-r3-s2 21.1-r3-s2.x
juniper / junos 22.1-r1-s1 22.1-r1-s1.x
juniper / junos 22.1-r2 22.1-r2.x
juniper / junos 22.1-r1-s2 22.1-r1-s2.x
juniper / junos 22.1-r2-s2 22.1-r2-s2.x
juniper / junos 21.4-r2-s2 21.4-r2-s2.x
juniper / junos 22.2-r1 22.2-r1.x
juniper / junos 22.2-r1-s1 22.2-r1-s1.x
juniper / junos 21.2-r3-s1 21.2-r3-s1.x
juniper / junos 21.1-r3-s3 21.1-r3-s3.x
juniper / junos 21.1-r3-s4 21.1-r3-s4.x
juniper / junos 22.2-r1-s2 22.2-r1-s2.x
juniper / junos 22.1-r2-s1 22.1-r2-s1.x