Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2023-36831

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition. Service restoration is only possible by rebooting the system.

The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations. Other products, platforms, and configurations are not affected by this vulnerability.

This issue affects Juniper Networks Junos OS on SRX Series: 22.2 versions prior to 22.2R3; 22.3 versions prior to 22.3R2-S1, 22.3R3; 22.4 versions prior to 22.4R1-S2, 22.4R2.

This issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.

  • Published: Jul 14, 2023
  • Updated: Jul 15, 2023
  • CVE: CVE-2023-36831
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
juniper / junos 22.2-r1 22.2-r1.x
juniper / junos 22.2-r1-s1 22.2-r1-s1.x
juniper / junos 22.2-r2 22.2-r2.x
juniper / junos 22.2-r1-s2 22.2-r1-s2.x
juniper / junos 22.2-r2-s1 22.2-r2-s1.x
juniper / junos 22.2-r2-s2 22.2-r2-s2.x
juniper / junos 22.3-r1-s2 22.3-r1-s2.x
juniper / junos 22.3-r1-s1 22.3-r1-s1.x
juniper / junos 22.3-r2 22.3-r2.x
juniper / junos 22.3-r1 22.3-r1.x
juniper / junos 22.4-r1 22.4-r1.x
juniper / junos 22.4-r1-s1 22.4-r1-s1.x