Skip to content

An Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved - 20230720004

Overview

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

When a Border Gateway Protocol (BGP) update message is received over an established BGP session, and that message contains a specific, optional transitive attribute, this session will be torn down with an update message error. This issue cannot propagate beyond an affected system as the processing error occurs as soon as the update is received. This issue is exploitable remotely as the respective attribute can propagate through unaffected systems and intermediate autonomous system (AS) (if any).

Continuous receipt of a BGP update containing this attribute will create a sustained Denial of Service (DoS) condition.

What is the vulnerability?

CVE-2023-0026 - CVSS v3 Base Score: 7.5

What is vulnerable?

The vulnerability affects the following Juniper products:

Juniper Networks Junos OS:

  • 15.1R1 and later versions prior to 20.4R3-S8;

  • 21.1 version 21.1R1 and later versions prior to 21.2R3-S6;

  • 21.3 versions prior to 21.3R3-S5;

  • 21.4 versions prior to 21.4R3-S4;

  • 22.1 versions prior to 22.1R3-S4;

  • 22.2 versions prior to 22.2R3-S2;

  • 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;

  • 22.4 versions prior to 22.4R2-S1, 22.4R3;

  • 23.1 versions prior to 23.1R1-S1, 23.1R2.\ Juniper Networks Junos OS Evolved:

  • All versions prior to 20.4R3-S8-EVO;

  • 21.1 version 21.1R1-EVO and later versions prior to 21.2R3-S6-EVO;

  • 21.3 versions prior to 21.3R3-S5-EVO;

  • 21.4 versions prior to 21.4R3-S4-EVO;

  • 22.1 versions prior to 22.1R3-S4-EVO;

  • 22.2 versions prior to 22.2R3-S2-EVO;

  • 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;

  • 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;

  • 23.1 versions prior to 23.1R1-S1-EVO, 23.1R2-EVO.

What has been observed?

There is no evidence of exploitation affecting Western Australian Government networks at the time of publishing.

Recommendation

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of one month (refer Patch Management):

Additional References