CVE-2023-22403: Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).
On QFX10K Series, Inter-Chassis Control Protocol (ICCP) is used in MC-LAG topologies to exchange control information between the devices in the topology. ICCP connection flaps and sync issues will be observed due to excessive specific traffic to the local device.
This issue affects Juniper Networks Junos OS on QFX10K Series:
All versions prior to 20.2R3-S7; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-22403?
CVE-2023-22403 is classified as a Denial of Service (DoS) vulnerability.
How do I fix CVE-2023-22403?
To mitigate CVE-2023-22403, please update your Junos OS to the latest version provided by Juniper Networks.
Which versions of Junos OS are affected by CVE-2023-22403?
CVE-2023-22403 affects multiple versions including versions prior to 20.4 and specific releases in 20.2, 21.1, and 21.4.
What can an attacker do by exploiting CVE-2023-22403?
An unauthenticated attacker can exploit CVE-2023-22403 to cause a Denial of Service condition on affected devices.
Is there any known workaround for CVE-2023-22403?
Currently, the recommended action for CVE-2023-22403 is to upgrade to a fixed version of Junos OS, as there are no effective workarounds.