CVE-2023-22412: Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed

Published Jan 12, 2023

Updated

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attacker to cause a flow processing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue occurs when SIP ALG is enabled and specific SIP messages are processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1 on MX Series, or SRX Series.

Affected Software

90 affected components

Juniper Junos=20.4

Juniper Junos=20.4-r1

Juniper Junos=20.4-r1-s1

Juniper Junos=20.4-r2

Juniper Junos=20.4-r2-s1

Juniper Junos=20.4-r2-s2

Juniper Junos=20.4-r3

Juniper Junos=20.4-r3-s1

Juniper Junos=20.4-r3-s2

Juniper Junos=20.4-r3-s3

Juniper Junos=21.1

Juniper Junos=21.1-r1

Juniper Junos=21.1-r1-s1

Juniper Junos=21.1-r2

Juniper Junos=21.1-r2-s1

Juniper Junos=21.1-r2-s2

Juniper Junos=21.1-r3

Juniper Junos=21.1-r3-s1

Juniper Junos=21.1-r3-s2

Juniper Junos=21.2

Juniper Junos=21.2-r1

Juniper Junos=21.2-r1-s1

Juniper Junos=21.2-r1-s2

Juniper Junos=21.2-r2

Juniper Junos=21.2-r2-s1

Juniper Junos=21.2-r2-s2

Juniper Junos=21.2-r3

Juniper Junos=21.2-r3-s1

Juniper Junos=21.3

Juniper Junos=21.3-r1

Juniper Junos=21.3-r1-s1

Juniper Junos=21.3-r1-s2

Juniper Junos=21.3-r2

Juniper Junos=21.3-r2-s1

Juniper Junos=21.3-r2-s2

Juniper Junos=21.4

Juniper Junos=21.4-r1

Juniper Junos=21.4-r1-s1

Juniper Junos=21.4-r1-s2

Juniper Junos=21.4-r2

Juniper Junos=21.4-r2-s1

Juniper Junos=21.4-r2-s2

Juniper Junos=22.1-r1

Juniper Junos=22.1-r1-s1

Juniper Junos=22.1-r1-s2

Juniper MX10

Juniper Mx10000

Juniper MX10003

Juniper MX10008

Juniper MX10016

Juniper MX104

Juniper MX150

Juniper MX2008

Juniper MX2010

Juniper MX2020

Juniper MX204

Juniper MX240

Juniper Mx40

Juniper MX480

Juniper Mx5

Juniper Mx80

Juniper MX960

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX1500

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper Srx240h2

Juniper SRX240m

Juniper SRX300

Juniper SRX320

Juniper SRX340

Juniper SRX3400

Juniper SRX345

Juniper SRX3600

Juniper Srx380

Juniper SRX4000

Juniper SRX4100

Juniper SRX4200

Juniper SRX4600

Juniper SRX5000

Juniper SRX5400

Juniper SRX550

Juniper Srx550 Hm

Juniper SRX550m

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Remediation

Information

The following software releases have been updated to resolve this specific issue: 20.4R3-S4, 21.1R3-S3, 21.2R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1, and all subsequent releases.

Event History

Jan 12, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-22412?

The severity of CVE-2023-22412 is classified as high, allowing for potential Denial of Service attacks.

How do I fix CVE-2023-22412?

To fix CVE-2023-22412, update your Junos OS to the latest patched version as specified in the vendor's security advisory.

Which devices are affected by CVE-2023-22412?

CVE-2023-22412 affects Juniper Networks Junos OS on MX Series and SRX Series devices with specific hardware configurations.

Who is vulnerable to CVE-2023-22412?

Unauthenticated, network-based attackers can exploit CVE-2023-22412, leading to denial of service conditions on vulnerable devices.

Is there a workaround for CVE-2023-22412?

There are no official workarounds for CVE-2023-22412; upgrading to the latest version is the recommended course of action.