6.5

CVE-2023-36842

An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause the jdhcpd to consume all the CPU cycles resulting in a Denial of Service (DoS).

On Junos OS devices with forward-snooped-client configured, if an attacker sends a specific DHCP packet to a non-configured interface, this will cause an infinite loop. The DHCP process will have to be restarted to recover the service.

This issue affects:

Juniper Networks Junos OS



  *  All versions earlier than 20.4R3-S9;
  *  21.2 versions earlier than 21.2R3-S7;
  *  21.3 versions earlier than 21.3R3-S5;
  *  21.4 versions earlier than 21.4R3-S5;
  *  22.1 versions earlier than 22.1R3-S4;
  *  22.2 versions earlier than 22.2R3-S3;
  *  22.3 versions earlier than 22.3R3-S2;
  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;
  *  23.2 versions earlier than 23.2R2.

Data is provided by the National Vulnerability Database (NVD)
Juniper ≫ Junos Version < 20.4
Juniper ≫ Junos Version20.4 Update-
Juniper ≫ Junos Version20.4 Updater1
Juniper ≫ Junos Version20.4 Updater1-s1
Juniper ≫ Junos Version20.4 Updater2
Juniper ≫ Junos Version20.4 Updater2-s1
Juniper ≫ Junos Version20.4 Updater2-s2
Juniper ≫ Junos Version20.4 Updater3
Juniper ≫ Junos Version20.4 Updater3-s1
Juniper ≫ Junos Version20.4 Updater3-s2
Juniper ≫ Junos Version20.4 Updater3-s3
Juniper ≫ Junos Version20.4 Updater3-s4
Juniper ≫ Junos Version20.4 Updater3-s5
Juniper ≫ Junos Version20.4 Updater3-s6
Juniper ≫ Junos Version20.4 Updater3-s7
Juniper ≫ Junos Version20.4 Updater3-s8
Juniper ≫ Junos Version21.2 Update-
Juniper ≫ Junos Version21.2 Updater1
Juniper ≫ Junos Version21.2 Updater1-s1
Juniper ≫ Junos Version21.2 Updater1-s2
Juniper ≫ Junos Version21.2 Updater2
Juniper ≫ Junos Version21.2 Updater2-s1
Juniper ≫ Junos Version21.2 Updater2-s2
Juniper ≫ Junos Version21.2 Updater3
Juniper ≫ Junos Version21.2 Updater3-s1
Juniper ≫ Junos Version21.2 Updater3-s2
Juniper ≫ Junos Version21.2 Updater3-s3
Juniper ≫ Junos Version21.2 Updater3-s4
Juniper ≫ Junos Version21.2 Updater3-s5
Juniper ≫ Junos Version21.2 Updater3-s6
Juniper ≫ Junos Version21.3 Update-
Juniper ≫ Junos Version21.3 Updater1
Juniper ≫ Junos Version21.3 Updater1-s1
Juniper ≫ Junos Version21.3 Updater1-s2
Juniper ≫ Junos Version21.3 Updater2
Juniper ≫ Junos Version21.3 Updater2-s1
Juniper ≫ Junos Version21.3 Updater2-s2
Juniper ≫ Junos Version21.3 Updater3
Juniper ≫ Junos Version21.3 Updater3-s1
Juniper ≫ Junos Version21.3 Updater3-s2
Juniper ≫ Junos Version21.3 Updater3-s3
Juniper ≫ Junos Version21.3 Updater3-s4
Juniper ≫ Junos Version21.4 Update-
Juniper ≫ Junos Version21.4 Updater1
Juniper ≫ Junos Version21.4 Updater1-s1
Juniper ≫ Junos Version21.4 Updater1-s2
Juniper ≫ Junos Version21.4 Updater2
Juniper ≫ Junos Version21.4 Updater2-s1
Juniper ≫ Junos Version21.4 Updater2-s2
Juniper ≫ Junos Version21.4 Updater3
Juniper ≫ Junos Version21.4 Updater3-s1
Juniper ≫ Junos Version21.4 Updater3-s2
Juniper ≫ Junos Version21.4 Updater3-s3
Juniper ≫ Junos Version21.4 Updater3-s4
Juniper ≫ Junos Version22.1 Update-
Juniper ≫ Junos Version22.1 Updater1
Juniper ≫ Junos Version22.1 Updater1-s1
Juniper ≫ Junos Version22.1 Updater1-s2
Juniper ≫ Junos Version22.1 Updater2
Juniper ≫ Junos Version22.1 Updater2-s1
Juniper ≫ Junos Version22.1 Updater2-s2
Juniper ≫ Junos Version22.1 Updater3
Juniper ≫ Junos Version22.1 Updater3-s1
Juniper ≫ Junos Version22.1 Updater3-s2
Juniper ≫ Junos Version22.1 Updater3-s3
Juniper ≫ Junos Version22.2 Update-
Juniper ≫ Junos Version22.2 Updater1
Juniper ≫ Junos Version22.2 Updater1-s1
Juniper ≫ Junos Version22.2 Updater1-s2
Juniper ≫ Junos Version22.2 Updater2
Juniper ≫ Junos Version22.2 Updater2-s1
Juniper ≫ Junos Version22.2 Updater2-s2
Juniper ≫ Junos Version22.2 Updater3
Juniper ≫ Junos Version22.2 Updater3-s1
Juniper ≫ Junos Version22.2 Updater3-s2
Juniper ≫ Junos Version22.3 Update-
Juniper ≫ Junos Version22.3 Updater1
Juniper ≫ Junos Version22.3 Updater1-s1
Juniper ≫ Junos Version22.3 Updater1-s2
Juniper ≫ Junos Version22.3 Updater2
Juniper ≫ Junos Version22.3 Updater2-s1
Juniper ≫ Junos Version22.3 Updater2-s2
Juniper ≫ Junos Version22.3 Updater3
Juniper ≫ Junos Version22.3 Updater3-s1
Juniper ≫ Junos Version22.4 Update-
Juniper ≫ Junos Version22.4 Updater1
Juniper ≫ Junos Version22.4 Updater1-s1
Juniper ≫ Junos Version22.4 Updater1-s2
Juniper ≫ Junos Version22.4 Updater2
Juniper ≫ Junos Version22.4 Updater2-s1
Juniper ≫ Junos Version23.2 Updater1
Juniper ≫ Junos Version23.2 Updater1-s1
Juniper ≫ Junos Version23.2 Updater1-s2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.107
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
sirt@juniper.net 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-703 Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.