CVE-2023-22416

EPSS 0.37%
Published 13.01.2023 00:15:11
Last modified 21.11.2024 07:44:46
Source sirt@juniper.net
Teams watchlist Login
Open Login

A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SRX Series platform with SIP ALG enabled, when a malformed SIP packet is received, the flow processing daemon (flowd) will crash and restart. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2; 22.2 versions prior to 22.2R1-S1, 22.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1 on SRX Series.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 20.4

   Juniper ≫ Mx10 Version-
   Juniper ≫ Mx10000 Version-
   Juniper ≫ Mx10003 Version-
   Juniper ≫ Mx10008 Version-
   Juniper ≫ Mx10016 Version-
   Juniper ≫ Mx104 Version-
   Juniper ≫ Mx150 Version-
   Juniper ≫ Mx2008 Version-
   Juniper ≫ Mx2010 Version-
   Juniper ≫ Mx2020 Version-
   Juniper ≫ Mx204 Version-
   Juniper ≫ Mx240 Version-
   Juniper ≫ Mx40 Version-
   Juniper ≫ Mx480 Version-
   Juniper ≫ Mx5 Version-
   Juniper ≫ Mx80 Version-
   Juniper ≫ Mx960 Version-
   Juniper ≫ Srx100 Version-
   Juniper ≫ Srx110 Version-
   Juniper ≫ Srx1400 Version-
   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx210 Version-
   Juniper ≫ Srx220 Version-
   Juniper ≫ Srx240 Version-
   Juniper ≫ Srx240h2 Version-
   Juniper ≫ Srx240m Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx3400 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx3600 Version-
   Juniper ≫ Srx380 Version-
   Juniper ≫ Srx4000 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx4600 Version-
   Juniper ≫ Srx5000 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx550 Hm Version-
   Juniper ≫ Srx550m Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-
   Juniper ≫ Srx650 Version-

Juniper ≫ Junos Version20.4 Update-

Juniper ≫ Junos Version20.4 Updater1

Juniper ≫ Junos Version20.4 Updater1-s1

Juniper ≫ Junos Version20.4 Updater2

Juniper ≫ Junos Version20.4 Updater2-s1

Juniper ≫ Junos Version20.4 Updater2-s2

Juniper ≫ Junos Version20.4 Updater3

Juniper ≫ Junos Version20.4 Updater3-s1

Juniper ≫ Junos Version20.4 Updater3-s2

Juniper ≫ Junos Version20.4 Updater3-s3

Juniper ≫ Junos Version20.4 Updater3-s4

Juniper ≫ Junos Version21.1 Update-

Juniper ≫ Junos Version21.1 Updater1

Juniper ≫ Junos Version21.1 Updater1-s1

Juniper ≫ Junos Version21.1 Updater2

Juniper ≫ Junos Version21.1 Updater2-s1

Juniper ≫ Junos Version21.1 Updater2-s2

Juniper ≫ Junos Version21.1 Updater3

Juniper ≫ Junos Version21.1 Updater3-s1

Juniper ≫ Junos Version21.1 Updater3-s2

Juniper ≫ Junos Version21.1 Updater3-s3

Juniper ≫ Junos Version21.2 Update-

Juniper ≫ Junos Version21.2 Updater1

Juniper ≫ Junos Version21.2 Updater1-s1

Juniper ≫ Junos Version21.2 Updater1-s2

Juniper ≫ Junos Version21.2 Updater2

Juniper ≫ Junos Version21.2 Updater2-s1

Juniper ≫ Junos Version21.2 Updater2-s2

Juniper ≫ Junos Version21.2 Updater3

Juniper ≫ Junos Version21.2 Updater3-s1

Juniper ≫ Junos Version21.3 Update-

Juniper ≫ Junos Version21.3 Updater1

Juniper ≫ Junos Version21.3 Updater1-s1

Juniper ≫ Junos Version21.3 Updater1-s2

Juniper ≫ Junos Version21.3 Updater2

Juniper ≫ Junos Version21.3 Updater2-s1

Juniper ≫ Junos Version21.3 Updater2-s2

Juniper ≫ Junos Version21.3 Updater3

Juniper ≫ Junos Version21.4 Update-

Juniper ≫ Junos Version21.4 Updater1

Juniper ≫ Junos Version21.4 Updater1-s1

Juniper ≫ Junos Version21.4 Updater1-s2

Juniper ≫ Junos Version21.4 Updater2

Juniper ≫ Junos Version21.4 Updater2-s1

Juniper ≫ Junos Version21.4 Updater2-s2

Juniper ≫ Junos Version22.1 Updater1

Juniper ≫ Junos Version22.1 Updater1-s1

Juniper ≫ Junos Version22.2 Updater1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.37%	0.577

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
sirt@juniper.net	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

https://kb.juniper.net/JSA70212

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-22416

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-22416

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-22416

EUVD