What is the severity of CVE-2023-44186?

CVE-2023-44186 has been assigned a critical severity level due to its potential for causing a Denial of Service (DoS) in affected systems.

How do I fix CVE-2023-44186?

To mitigate CVE-2023-44186, upgrade to the latest version of Junos OS or Junos OS Evolved as specified in the official security advisory.

Which versions of Junos OS are affected by CVE-2023-44186?

CVE-2023-44186 affects several versions of Junos OS, including versions 20.4 and 21.1 up to 21.4, among others.

What are the potential impacts of CVE-2023-44186 on my network?

Exploitation of CVE-2023-44186 can lead to network outages or disruption due to Denial of Service attacks targeted at BGP operations.

Is there a workaround for CVE-2023-44186?

Currently, the recommended action for CVE-2023-44186 is to apply the latest patches and updates, as no specific workaround has been provided.

Vulnerability/
CVE-2023-44186

high

7.5

CWE

755

11/10/2023

3/12/2024

CVE-2023-44186: Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor

First published: Wed Oct 11 2023(Updated: )

An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition. This issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor. Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability. This issue affects: Juniper Networks Junos OS: * All versions prior to 20.4R3-S8; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R2. Juniper Networks Junos OS Evolved * All versions prior to 20.4R3-S8-EVO; * 21.1 versions 21.1R1-EVO and later; * 21.2 versions prior to 21.2R3-S6-EVO; * 21.3 versions prior to 21.3R3-S5-EVO; * 21.4 versions prior to 21.4R3-S5-EVO; * 22.1 versions prior to 22.1R3-S4-EVO; * 22.2 versions prior to 22.2R3-S2-EVO; * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO; * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO; * 23.2 versions prior to 23.2R2-EVO.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Juniper Junos	<20.4
Juniper Junos	=20.4
Juniper Junos	=20.4-r1
Juniper Junos	=20.4-r1-s1
Juniper Junos	=20.4-r2
Juniper Junos	=20.4-r2-s1
Juniper Junos	=20.4-r2-s2
Juniper Junos	=20.4-r3
Juniper Junos	=20.4-r3-s1
Juniper Junos	=20.4-r3-s2
Juniper Junos	=20.4-r3-s3
Juniper Junos	=20.4-r3-s4
Juniper Junos	=20.4-r3-s5
Juniper Junos	=20.4-r3-s6
Juniper Junos	=20.4-r3-s7
Juniper Junos	=21.1-r1
Juniper Junos	=21.1-r1-s1
Juniper Junos	=21.1-r2
Juniper Junos	=21.1-r2-s1
Juniper Junos	=21.1-r2-s2
Juniper Junos	=21.1-r3
Juniper Junos	=21.1-r3-s1
Juniper Junos	=21.1-r3-s2
Juniper Junos	=21.1-r3-s3
Juniper Junos	=21.1-r3-s4
Juniper Junos	=21.1-r3-s5
Juniper Junos	=21.2
Juniper Junos	=21.2-r1
Juniper Junos	=21.2-r1-s1
Juniper Junos	=21.2-r1-s2
Juniper Junos	=21.2-r2
Juniper Junos	=21.2-r2-s1
Juniper Junos	=21.2-r2-s2
Juniper Junos	=21.2-r3
Juniper Junos	=21.2-r3-s1
Juniper Junos	=21.2-r3-s2
Juniper Junos	=21.2-r3-s3
Juniper Junos	=21.2-r3-s4
Juniper Junos	=21.2-r3-s5
Juniper Junos	=21.3
Juniper Junos	=21.3-r1
Juniper Junos	=21.3-r1-s1
Juniper Junos	=21.3-r1-s2
Juniper Junos	=21.3-r2
Juniper Junos	=21.3-r2-s1
Juniper Junos	=21.3-r2-s2
Juniper Junos	=21.3-r3
Juniper Junos	=21.3-r3-s1
Juniper Junos	=21.3-r3-s2
Juniper Junos	=21.3-r3-s3
Juniper Junos	=21.3-r3-s4
Juniper Junos	=21.4
Juniper Junos	=21.4-r1
Juniper Junos	=21.4-r1-s1
Juniper Junos	=21.4-r1-s2
Juniper Junos	=21.4-r2
Juniper Junos	=21.4-r2-s1
Juniper Junos	=21.4-r2-s2
Juniper Junos	=21.4-r3
Juniper Junos	=21.4-r3-s1
Juniper Junos	=21.4-r3-s2
Juniper Junos	=21.4-r3-s3
Juniper Junos	=21.4-r3-s4
Juniper Junos	=22.1-r1
Juniper Junos	=22.1-r1-s1
Juniper Junos	=22.1-r1-s2
Juniper Junos	=22.1-r2
Juniper Junos	=22.1-r2-s1
Juniper Junos	=22.1-r2-s2
Juniper Junos	=22.1-r3
Juniper Junos	=22.1-r3-s1
Juniper Junos	=22.1-r3-s2
Juniper Junos	=22.1-r3-s3
Juniper Junos	=22.2-r1
Juniper Junos	=22.2-r1-s1
Juniper Junos	=22.2-r1-s2
Juniper Junos	=22.2-r2
Juniper Junos	=22.2-r2-s1
Juniper Junos	=22.2-r2-s2
Juniper Junos	=22.2-r3
Juniper Junos	=22.2-r3-s1
Juniper Junos	=22.3-r1
Juniper Junos	=22.3-r1-s1
Juniper Junos	=22.3-r1-s2
Juniper Junos	=22.3-r2
Juniper Junos	=22.3-r2-s1
Juniper Junos	=22.3-r3
Juniper Junos	=22.4-r1
Juniper Junos	=22.4-r1-s1
Juniper Junos	=22.4-r1-s2
Juniper Junos	=22.4-r2
Juniper Junos	=23.1-r1
Juniper Junos	=23.2-r1
Juniper Junos	=23.2-r1-s1
Junos OS Evolved	<20.4
Junos OS Evolved	=20.4
Junos OS Evolved	=20.4-r1
Junos OS Evolved	=20.4-r1-s1
Junos OS Evolved	=20.4-r1-s2
Junos OS Evolved	=20.4-r2
Junos OS Evolved	=20.4-r2-s1
Junos OS Evolved	=20.4-r2-s2
Junos OS Evolved	=20.4-r2-s3
Junos OS Evolved	=20.4-r3
Junos OS Evolved	=20.4-r3-s1
Junos OS Evolved	=20.4-r3-s2
Junos OS Evolved	=20.4-r3-s3
Junos OS Evolved	=20.4-r3-s4
Junos OS Evolved	=20.4-r3-s5
Junos OS Evolved	=20.4-r3-s6
Junos OS Evolved	=20.4-r3-s7
Junos OS Evolved	=21.1
Junos OS Evolved	=21.1-r1
Junos OS Evolved	=21.1-r1-s1
Junos OS Evolved	=21.1-r2
Junos OS Evolved	=21.1-r3
Junos OS Evolved	=21.1-r3-s1
Junos OS Evolved	=21.1-r3-s2
Junos OS Evolved	=21.1-r3-s3
Junos OS Evolved	=21.2
Junos OS Evolved	=21.2-r1
Junos OS Evolved	=21.2-r1-s1
Junos OS Evolved	=21.2-r1-s2
Junos OS Evolved	=21.2-r2
Junos OS Evolved	=21.2-r2-s1
Junos OS Evolved	=21.2-r2-s2
Junos OS Evolved	=21.2-r3
Junos OS Evolved	=21.2-r3-s1
Junos OS Evolved	=21.2-r3-s2
Junos OS Evolved	=21.2-r3-s3
Junos OS Evolved	=21.2-r3-s4
Junos OS Evolved	=21.2-r3-s5
Junos OS Evolved	=21.3
Junos OS Evolved	=21.3-r1
Junos OS Evolved	=21.3-r1-s1
Junos OS Evolved	=21.3-r2
Junos OS Evolved	=21.3-r2-s1
Junos OS Evolved	=21.3-r2-s2
Junos OS Evolved	=21.3-r3
Junos OS Evolved	=21.3-r3-s1
Junos OS Evolved	=21.3-r3-s2
Junos OS Evolved	=21.3-r3-s3
Junos OS Evolved	=21.3-r3-s4
Junos OS Evolved	=21.4
Junos OS Evolved	=21.4-r1
Junos OS Evolved	=21.4-r1-s1
Junos OS Evolved	=21.4-r1-s2
Junos OS Evolved	=21.4-r2
Junos OS Evolved	=21.4-r2-s1
Junos OS Evolved	=21.4-r2-s2
Junos OS Evolved	=21.4-r3
Junos OS Evolved	=21.4-r3-s1
Junos OS Evolved	=21.4-r3-s2
Junos OS Evolved	=21.4-r3-s3
Junos OS Evolved	=21.4-r3-s4
Junos OS Evolved	=22.1-r1
Junos OS Evolved	=22.1-r1-s1
Junos OS Evolved	=22.1-r1-s2
Junos OS Evolved	=22.1-r2
Junos OS Evolved	=22.1-r2-s1
Junos OS Evolved	=22.1-r3
Junos OS Evolved	=22.1-r3-s1
Junos OS Evolved	=22.1-r3-s2
Junos OS Evolved	=22.1-r3-s3
Junos OS Evolved	=22.2-r1
Junos OS Evolved	=22.2-r1-s1
Junos OS Evolved	=22.2-r2
Junos OS Evolved	=22.2-r2-s1
Junos OS Evolved	=22.2-r2-s2
Junos OS Evolved	=22.2-r3
Junos OS Evolved	=22.2-r3-s1
Junos OS Evolved	=22.3-r1
Junos OS Evolved	=22.3-r1-s1
Junos OS Evolved	=22.3-r1-s2
Junos OS Evolved	=22.3-r2
Junos OS Evolved	=22.3-r2-s1
Junos OS Evolved	=22.4-r1
Junos OS Evolved	=22.4-r1-s1
Junos OS Evolved	=22.4-r1-s2
Junos OS Evolved	=22.4-r2
Junos OS Evolved	=23.2
Junos OS Evolved	=23.2-r1
Junos OS Evolved	=23.2-r1-s1

Remedy

The following software releases have been updated to resolve this specific issue: Junos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1, and all subsequent releases. Junos OS Evolved: 20.4R3-S8-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S1-EVO, 22.4R3-EVO, 23.2R1-EVO, and all subsequent releases.

Never miss a vulnerability like this again

Reference Links

https://supportportal.juniper.net/JSA73150

Frequently Asked Questions

What is the severity of CVE-2023-44186?
CVE-2023-44186 has been assigned a critical severity level due to its potential for causing a Denial of Service (DoS) in affected systems.
How do I fix CVE-2023-44186?
To mitigate CVE-2023-44186, upgrade to the latest version of Junos OS or Junos OS Evolved as specified in the official security advisory.
Which versions of Junos OS are affected by CVE-2023-44186?
CVE-2023-44186 affects several versions of Junos OS, including versions 20.4 and 21.1 up to 21.4, among others.
What are the potential impacts of CVE-2023-44186 on my network?
Exploitation of CVE-2023-44186 can lead to network outages or disruption due to Denial of Service attacks targeted at BGP operations.
Is there a workaround for CVE-2023-44186?
Currently, the recommended action for CVE-2023-44186 is to apply the latest patches and updates, as no specific workaround has been provided.

agent/type
agent/title
agent/severity
agent/references
agent/remedy
agent/weakness
agent/first-publish-date
agent/description
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/author
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-index
vendor/juniper
canonical/juniper junos
version/juniper junos/20.4
version/juniper junos/20.4-r1
version/juniper junos/20.4-r1-s1
version/juniper junos/20.4-r2
version/juniper junos/20.4-r2-s1
version/juniper junos/20.4-r2-s2
version/juniper junos/20.4-r3
version/juniper junos/20.4-r3-s1
version/juniper junos/20.4-r3-s2
version/juniper junos/20.4-r3-s3
version/juniper junos/20.4-r3-s4
version/juniper junos/20.4-r3-s5
version/juniper junos/20.4-r3-s6
version/juniper junos/20.4-r3-s7
version/juniper junos/21.1-r1
version/juniper junos/21.1-r1-s1
version/juniper junos/21.1-r2
version/juniper junos/21.1-r2-s1
version/juniper junos/21.1-r2-s2
version/juniper junos/21.1-r3
version/juniper junos/21.1-r3-s1
version/juniper junos/21.1-r3-s2
version/juniper junos/21.1-r3-s3
version/juniper junos/21.1-r3-s4
version/juniper junos/21.1-r3-s5
version/juniper junos/21.2
version/juniper junos/21.2-r1
version/juniper junos/21.2-r1-s1
version/juniper junos/21.2-r1-s2
version/juniper junos/21.2-r2
version/juniper junos/21.2-r2-s1
version/juniper junos/21.2-r2-s2
version/juniper junos/21.2-r3
version/juniper junos/21.2-r3-s1
version/juniper junos/21.2-r3-s2
version/juniper junos/21.2-r3-s3
version/juniper junos/21.2-r3-s4
version/juniper junos/21.2-r3-s5
version/juniper junos/21.3
version/juniper junos/21.3-r1
version/juniper junos/21.3-r1-s1
version/juniper junos/21.3-r1-s2
version/juniper junos/21.3-r2
version/juniper junos/21.3-r2-s1
version/juniper junos/21.3-r2-s2
version/juniper junos/21.3-r3
version/juniper junos/21.3-r3-s1
version/juniper junos/21.3-r3-s2
version/juniper junos/21.3-r3-s3
version/juniper junos/21.3-r3-s4
version/juniper junos/21.4
version/juniper junos/21.4-r1
version/juniper junos/21.4-r1-s1
version/juniper junos/21.4-r1-s2
version/juniper junos/21.4-r2
version/juniper junos/21.4-r2-s1
version/juniper junos/21.4-r2-s2
version/juniper junos/21.4-r3
version/juniper junos/21.4-r3-s1
version/juniper junos/21.4-r3-s2
version/juniper junos/21.4-r3-s3
version/juniper junos/21.4-r3-s4
version/juniper junos/22.1-r1
version/juniper junos/22.1-r1-s1
version/juniper junos/22.1-r1-s2
version/juniper junos/22.1-r2
version/juniper junos/22.1-r2-s1
version/juniper junos/22.1-r2-s2
version/juniper junos/22.1-r3
version/juniper junos/22.1-r3-s1
version/juniper junos/22.1-r3-s2
version/juniper junos/22.1-r3-s3
version/juniper junos/22.2-r1
version/juniper junos/22.2-r1-s1
version/juniper junos/22.2-r1-s2
version/juniper junos/22.2-r2
version/juniper junos/22.2-r2-s1
version/juniper junos/22.2-r2-s2
version/juniper junos/22.2-r3
version/juniper junos/22.2-r3-s1
version/juniper junos/22.3-r1
version/juniper junos/22.3-r1-s1
version/juniper junos/22.3-r1-s2
version/juniper junos/22.3-r2
version/juniper junos/22.3-r2-s1
version/juniper junos/22.3-r3
version/juniper junos/22.4-r1
version/juniper junos/22.4-r1-s1
version/juniper junos/22.4-r1-s2
version/juniper junos/22.4-r2
version/juniper junos/23.1-r1
version/juniper junos/23.2-r1
version/juniper junos/23.2-r1-s1
canonical/junos os evolved
version/junos os evolved/20.4
version/junos os evolved/20.4-r1
version/junos os evolved/20.4-r1-s1
version/junos os evolved/20.4-r1-s2
version/junos os evolved/20.4-r2
version/junos os evolved/20.4-r2-s1
version/junos os evolved/20.4-r2-s2
version/junos os evolved/20.4-r2-s3
version/junos os evolved/20.4-r3
version/junos os evolved/20.4-r3-s1
version/junos os evolved/20.4-r3-s2
version/junos os evolved/20.4-r3-s3
version/junos os evolved/20.4-r3-s4
version/junos os evolved/20.4-r3-s5
version/junos os evolved/20.4-r3-s6
version/junos os evolved/20.4-r3-s7
version/junos os evolved/21.1
version/junos os evolved/21.1-r1
version/junos os evolved/21.1-r1-s1
version/junos os evolved/21.1-r2
version/junos os evolved/21.1-r3
version/junos os evolved/21.1-r3-s1
version/junos os evolved/21.1-r3-s2
version/junos os evolved/21.1-r3-s3
version/junos os evolved/21.2
version/junos os evolved/21.2-r1
version/junos os evolved/21.2-r1-s1
version/junos os evolved/21.2-r1-s2
version/junos os evolved/21.2-r2
version/junos os evolved/21.2-r2-s1
version/junos os evolved/21.2-r2-s2
version/junos os evolved/21.2-r3
version/junos os evolved/21.2-r3-s1
version/junos os evolved/21.2-r3-s2
version/junos os evolved/21.2-r3-s3
version/junos os evolved/21.2-r3-s4
version/junos os evolved/21.2-r3-s5
version/junos os evolved/21.3
version/junos os evolved/21.3-r1
version/junos os evolved/21.3-r1-s1
version/junos os evolved/21.3-r2
version/junos os evolved/21.3-r2-s1
version/junos os evolved/21.3-r2-s2
version/junos os evolved/21.3-r3
version/junos os evolved/21.3-r3-s1
version/junos os evolved/21.3-r3-s2
version/junos os evolved/21.3-r3-s3
version/junos os evolved/21.3-r3-s4
version/junos os evolved/21.4
version/junos os evolved/21.4-r1
version/junos os evolved/21.4-r1-s1
version/junos os evolved/21.4-r1-s2
version/junos os evolved/21.4-r2
version/junos os evolved/21.4-r2-s1
version/junos os evolved/21.4-r2-s2
version/junos os evolved/21.4-r3
version/junos os evolved/21.4-r3-s1
version/junos os evolved/21.4-r3-s2
version/junos os evolved/21.4-r3-s3
version/junos os evolved/21.4-r3-s4
version/junos os evolved/22.1-r1
version/junos os evolved/22.1-r1-s1
version/junos os evolved/22.1-r1-s2
version/junos os evolved/22.1-r2
version/junos os evolved/22.1-r2-s1
version/junos os evolved/22.1-r3
version/junos os evolved/22.1-r3-s1
version/junos os evolved/22.1-r3-s2
version/junos os evolved/22.1-r3-s3
version/junos os evolved/22.2-r1
version/junos os evolved/22.2-r1-s1
version/junos os evolved/22.2-r2
version/junos os evolved/22.2-r2-s1
version/junos os evolved/22.2-r2-s2
version/junos os evolved/22.2-r3
version/junos os evolved/22.2-r3-s1
version/junos os evolved/22.3-r1
version/junos os evolved/22.3-r1-s1
version/junos os evolved/22.3-r1-s2
version/junos os evolved/22.3-r2
version/junos os evolved/22.3-r2-s1
version/junos os evolved/22.4-r1
version/junos os evolved/22.4-r1-s1
version/junos os evolved/22.4-r1-s2
version/junos os evolved/22.4-r2
version/junos os evolved/23.2
version/junos os evolved/23.2-r1
version/junos os evolved/23.2-r1-s1