CVE-2023-44199: Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).
On Junos MX Series platforms with Precision Time Protocol (PTP) configured, a prolonged routing protocol churn can lead to an FPC crash and restart.
This issue affects Juniper Networks Junos OS on MX Series:
All versions prior to 20.4R3-S4; 21.1 version 21.1R1 and later versions; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S5; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R3; 22.2 versions prior to 22.2R1-S1, 22.2R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44199?
CVE-2023-44199 is classified as a Denial of Service (DoS) vulnerability.
How does CVE-2023-44199 affect Juniper Networks devices?
CVE-2023-44199 allows an unauthenticated attacker to cause a Denial of Service on affected Junos OS devices.
Which versions of Junos OS are impacted by CVE-2023-44199?
CVE-2023-44199 affects Junos OS versions up to 20.4 and specific versions in the 21.x and 22.x series.
How do I mitigate CVE-2023-44199?
To mitigate CVE-2023-44199, users should upgrade to the fixed versions provided by Juniper Networks.
What should I do if I suspect exploitation of CVE-2023-44199 on my network?
If you suspect exploitation of CVE-2023-44199, immediately implement network segmentation and apply security updates.