CVE-2023-36842: Junos OS: jdhcpd will hang on receiving a specific DHCP packet
An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause the jdhcpd to consume all the CPU cycles resulting in a Denial of Service (DoS).
On Junos OS devices with forward-snooped-client configured, if an attacker sends a specific DHCP packet to a non-configured interface, this will cause an infinite loop. The DHCP process will have to be restarted to recover the service.
This issue affects:
Juniper Networks Junos OS
All versions earlier than 20.4R3-S9; 21.2 versions earlier than 21.2R3-S7; 21.3 versions earlier than 21.3R3-S5; 21.4 versions earlier than 21.4R3-S5; 22.1 versions earlier than 22.1R3-S4; 22.2 versions earlier than 22.2R3-S3; 22.3 versions earlier than 22.3R3-S2; 22.4 versions earlier than 22.4R2-S2, 22.4R3; 23.2 versions earlier than 23.2R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-36842?
CVE-2023-36842 is classified as a high-severity vulnerability leading to Denial of Service (DoS).
How do I fix CVE-2023-36842?
Fixing CVE-2023-36842 involves upgrading affected Junos OS versions to the latest secure release provided by Juniper Networks.
Which versions of Junos OS are affected by CVE-2023-36842?
CVE-2023-36842 affects Junos OS versions up to 20.4 and various versions from 21.2 through 23.2, including specific releases.
Can CVE-2023-36842 be exploited remotely?
Yes, CVE-2023-36842 can be exploited by an adjacent, unauthenticated attacker over the network.
What impact does CVE-2023-36842 have on systems?
CVE-2023-36842 may cause the Juniper DHCP Daemon to consume all CPU cycles, resulting in a Denial of Service on the device.