CVE-2023-28979: Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails
An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario and if an additional integrity check is configured, it will fail to drop specific malformed IPv6 packets, and then these packets will be forwarded to other connected networks. This issue affects Juniper Networks Junos OS: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2; 22.2 versions prior to 22.2R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What are the potential impacts of CVE-2023-28979?
CVE-2023-28979 allows an unauthenticated adjacent attacker to bypass an integrity check in Junos OS, which could lead to unauthorized access or alteration of system data.
How do I patch CVE-2023-28979?
To remediate CVE-2023-28979, upgrade your Junos OS version to a patched version that addresses this vulnerability.
Which versions of Junos OS are affected by CVE-2023-28979?
CVE-2023-28979 affects Junos OS versions prior to 19.3, including version 19.3 itself without the necessary updates.
What type of vulnerability is CVE-2023-28979 categorized as?
CVE-2023-28979 is categorized as an Improper Check for Unusual or Exceptional Conditions vulnerability.
Does CVE-2023-28979 allow remote exploitation?
CVE-2023-28979 can be exploited by an adjacent attacker, meaning they need to have some level of network access to the affected device.