6.5

CVE-2023-36842

Junos OS: jdhcpd will hang on receiving a specific DHCP packet

An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause the jdhcpd to consume all the CPU cycles resulting in a Denial of Service (DoS).

On Junos OS devices with forward-snooped-client configured, if an attacker sends a specific DHCP packet to a non-configured interface, this will cause an infinite loop. The DHCP process will have to be restarted to recover the service.

This issue affects:

Juniper Networks Junos OS



  *  All versions earlier than 20.4R3-S9;
  *  21.2 versions earlier than 21.2R3-S7;
  *  21.3 versions earlier than 21.3R3-S5;
  *  21.4 versions earlier than 21.4R3-S5;
  *  22.1 versions earlier than 22.1R3-S4;
  *  22.2 versions earlier than 22.2R3-S3;
  *  22.3 versions earlier than 22.3R3-S2;
  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;
  *  23.2 versions earlier than 23.2R2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version < 20.4
Juniper ≫ Junos Version 20.4 Update -
Juniper ≫ Junos Version 20.4 Update r1
Juniper ≫ Junos Version 20.4 Update r1-s1
Juniper ≫ Junos Version 20.4 Update r2
Juniper ≫ Junos Version 20.4 Update r2-s1
Juniper ≫ Junos Version 20.4 Update r2-s2
Juniper ≫ Junos Version 20.4 Update r3
Juniper ≫ Junos Version 20.4 Update r3-s1
Juniper ≫ Junos Version 20.4 Update r3-s2
Juniper ≫ Junos Version 20.4 Update r3-s3
Juniper ≫ Junos Version 20.4 Update r3-s4
Juniper ≫ Junos Version 20.4 Update r3-s5
Juniper ≫ Junos Version 20.4 Update r3-s6
Juniper ≫ Junos Version 20.4 Update r3-s7
Juniper ≫ Junos Version 20.4 Update r3-s8
Juniper ≫ Junos Version 21.2 Update -
Juniper ≫ Junos Version 21.2 Update r1
Juniper ≫ Junos Version 21.2 Update r1-s1
Juniper ≫ Junos Version 21.2 Update r1-s2
Juniper ≫ Junos Version 21.2 Update r2
Juniper ≫ Junos Version 21.2 Update r2-s1
Juniper ≫ Junos Version 21.2 Update r2-s2
Juniper ≫ Junos Version 21.2 Update r3
Juniper ≫ Junos Version 21.2 Update r3-s1
Juniper ≫ Junos Version 21.2 Update r3-s2
Juniper ≫ Junos Version 21.2 Update r3-s3
Juniper ≫ Junos Version 21.2 Update r3-s4
Juniper ≫ Junos Version 21.2 Update r3-s5
Juniper ≫ Junos Version 21.2 Update r3-s6
Juniper ≫ Junos Version 21.3 Update -
Juniper ≫ Junos Version 21.3 Update r1
Juniper ≫ Junos Version 21.3 Update r1-s1
Juniper ≫ Junos Version 21.3 Update r1-s2
Juniper ≫ Junos Version 21.3 Update r2
Juniper ≫ Junos Version 21.3 Update r2-s1
Juniper ≫ Junos Version 21.3 Update r2-s2
Juniper ≫ Junos Version 21.3 Update r3
Juniper ≫ Junos Version 21.3 Update r3-s1
Juniper ≫ Junos Version 21.3 Update r3-s2
Juniper ≫ Junos Version 21.3 Update r3-s3
Juniper ≫ Junos Version 21.3 Update r3-s4
Juniper ≫ Junos Version 21.4 Update -
Juniper ≫ Junos Version 21.4 Update r1
Juniper ≫ Junos Version 21.4 Update r1-s1
Juniper ≫ Junos Version 21.4 Update r1-s2
Juniper ≫ Junos Version 21.4 Update r2
Juniper ≫ Junos Version 21.4 Update r2-s1
Juniper ≫ Junos Version 21.4 Update r2-s2
Juniper ≫ Junos Version 21.4 Update r3
Juniper ≫ Junos Version 21.4 Update r3-s1
Juniper ≫ Junos Version 21.4 Update r3-s2
Juniper ≫ Junos Version 21.4 Update r3-s3
Juniper ≫ Junos Version 21.4 Update r3-s4
Juniper ≫ Junos Version 22.1 Update -
Juniper ≫ Junos Version 22.1 Update r1
Juniper ≫ Junos Version 22.1 Update r1-s1
Juniper ≫ Junos Version 22.1 Update r1-s2
Juniper ≫ Junos Version 22.1 Update r2
Juniper ≫ Junos Version 22.1 Update r2-s1
Juniper ≫ Junos Version 22.1 Update r2-s2
Juniper ≫ Junos Version 22.1 Update r3
Juniper ≫ Junos Version 22.1 Update r3-s1
Juniper ≫ Junos Version 22.1 Update r3-s2
Juniper ≫ Junos Version 22.1 Update r3-s3
Juniper ≫ Junos Version 22.2 Update -
Juniper ≫ Junos Version 22.2 Update r1
Juniper ≫ Junos Version 22.2 Update r1-s1
Juniper ≫ Junos Version 22.2 Update r1-s2
Juniper ≫ Junos Version 22.2 Update r2
Juniper ≫ Junos Version 22.2 Update r2-s1
Juniper ≫ Junos Version 22.2 Update r2-s2
Juniper ≫ Junos Version 22.2 Update r3
Juniper ≫ Junos Version 22.2 Update r3-s1
Juniper ≫ Junos Version 22.2 Update r3-s2
Juniper ≫ Junos Version 22.3 Update -
Juniper ≫ Junos Version 22.3 Update r1
Juniper ≫ Junos Version 22.3 Update r1-s1
Juniper ≫ Junos Version 22.3 Update r1-s2
Juniper ≫ Junos Version 22.3 Update r2
Juniper ≫ Junos Version 22.3 Update r2-s1
Juniper ≫ Junos Version 22.3 Update r2-s2
Juniper ≫ Junos Version 22.3 Update r3
Juniper ≫ Junos Version 22.3 Update r3-s1
Juniper ≫ Junos Version 22.4 Update -
Juniper ≫ Junos Version 22.4 Update r1
Juniper ≫ Junos Version 22.4 Update r1-s1
Juniper ≫ Junos Version 22.4 Update r1-s2
Juniper ≫ Junos Version 22.4 Update r2
Juniper ≫ Junos Version 22.4 Update r2-s1
Juniper ≫ Junos Version 23.2 Update r1
Juniper ≫ Junos Version 23.2 Update r1-s1
Juniper ≫ Junos Version 23.2 Update r1-s2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.208
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Juniper 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-703 Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://supportportal.juniper.net/JSA75730
Vendor Advisory
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Not Applicable