Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-28959 Details

Description

An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on QFX10002 allows an unauthenticated, adjacent attacker on the local broadcast domain sending a malformed packet to the device, causing all PFEs other than the inbound PFE to wedge and to eventually restart, resulting in a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue can only be triggered by sending a specific malformed packet to the device. Transit traffic does not trigger this issue. An indication of this issue occurring can be seen through the following log messages: fpc0 expr_hostbound_packet_handler: Receive pe 73? fpc0 Cmerror Op Set: PE Chip: PE0[0]: PGQ:misc_intr: 0x00000020: Enqueue of a packet with out-of-range VOQ in 192K-VOQ mode (URI: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL) The logs list below can also be observed when this issue occurs fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107), scope: pfe, category: functional, severity: major, module: PE Chip, type: Description for PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_PGQ_MISC_INT_EVENTS_ENQ_192K_VIOL (0x210107) in module: PE Chip with scope: pfe category: functional level: major fpc0 Error: /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a), scope: pfe, category: functional, severity: fatal, module: PE Chip, type: Description for PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE fpc0 Performing action cmalarm for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal fpc0 Performing action disable-pfe for error /fpc/0/pfe/0/cm/0/PE_Chip/0/PECHIP_CMERROR_CM_INT_REG_DCHK_PIPE (0x21011a) in module: PE Chip with scope: pfe category: functional level: fatal This issue affects Juniper Networks Junos OS on QFX10002: All versions prior to 19.1R3-S10; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S7; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://supportportal.juniper.net/JSA70584	CVE	Vendor Advisory
https://supportportal.juniper.net/JSA70584	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-703	Improper Check or Handling of Exceptional Conditions	[email protected]

Affected Products

Product	Versions
juniper junos	< 19.1 19.1 - 19.1 r1 19.1 r1-s1 19.1 r1-s2
CPE cpe:2.3:o:juniper:junos:::::::: cpe:2.3:o:juniper:junos:19.1:-:::::: cpe:2.3:o:juniper:junos:19.1:r1:::::: cpe:2.3:o:juniper:junos:19.1:r1-s1:::::: cpe:2.3:o:juniper:junos:19.1:r1-s2:::::: cpe:2.3:o:juniper:junos:19.1:r1-s3:::::: cpe:2.3:o:juniper:junos:19.1:r1-s4:::::: cpe:2.3:o:juniper:junos:19.1:r1-s5:::::: cpe:2.3:o:juniper:junos:19.1:r1-s6:::::: cpe:2.3:o:juniper:junos:19.1:r2:::::: cpe:2.3:o:juniper:junos:19.1:r2-s1:::::: cpe:2.3:o:juniper:junos:19.1:r2-s2:::::: cpe:2.3:o:juniper:junos:19.1:r2-s3:::::: cpe:2.3:o:juniper:junos:19.1:r3:::::: cpe:2.3:o:juniper:junos:19.1:r3-s1:::::: cpe:2.3:o:juniper:junos:19.1:r3-s2:::::: cpe:2.3:o:juniper:junos:19.1:r3-s3:::::: cpe:2.3:o:juniper:junos:19.1:r3-s4:::::: cpe:2.3:o:juniper:junos:19.1:r3-s5:::::: cpe:2.3:o:juniper:junos:19.1:r3-s6:::::: cpe:2.3:o:juniper:junos:19.1:r3-s7:::::: cpe:2.3:o:juniper:junos:19.1:r3-s8:::::: cpe:2.3:o:juniper:junos:19.1:r3-s9:::::: cpe:2.3:o:juniper:junos:19.4:-:::::: cpe:2.3:o:juniper:junos:19.4:r1:::::: cpe:2.3:o:juniper:junos:19.4:r1-s1:::::: cpe:2.3:o:juniper:junos:19.4:r1-s2:::::: cpe:2.3:o:juniper:junos:19.4:r1-s3:::::: cpe:2.3:o:juniper:junos:19.4:r1-s4:::::: cpe:2.3:o:juniper:junos:19.4:r2:::::: cpe:2.3:o:juniper:junos:19.4:r2-s1:::::: cpe:2.3:o:juniper:junos:19.4:r2-s2:::::: cpe:2.3:o:juniper:junos:19.4:r2-s3:::::: cpe:2.3:o:juniper:junos:19.4:r2-s4:::::: cpe:2.3:o:juniper:junos:19.4:r2-s5:::::: cpe:2.3:o:juniper:junos:19.4:r2-s6:::::: cpe:2.3:o:juniper:junos:19.4:r2-s7:::::: cpe:2.3:o:juniper:junos:19.4:r3:::::: cpe:2.3:o:juniper:junos:19.4:r3-s1:::::: cpe:2.3:o:juniper:junos:19.4:r3-s10:::::: cpe:2.3:o:juniper:junos:20.2:-:::::: cpe:2.3:o:juniper:junos:20.2:r1:::::: cpe:2.3:o:juniper:junos:20.2:r1-s1:::::: cpe:2.3:o:juniper:junos:20.2:r1-s2:::::: cpe:2.3:o:juniper:junos:20.2:r1-s3:::::: cpe:2.3:o:juniper:junos:20.2:r2:::::: cpe:2.3:o:juniper:junos:20.2:r2-s1:::::: cpe:2.3:o:juniper:junos:20.2:r2-s2:::::: cpe:2.3:o:juniper:junos:20.2:r2-s3:::::: cpe:2.3:o:juniper:junos:20.2:r3:::::: cpe:2.3:o:juniper:junos:20.2:r3-s1:::::: cpe:2.3:o:juniper:junos:20.2:r3-s2:::::: cpe:2.3:o:juniper:junos:20.2:r3-s3:::::: cpe:2.3:o:juniper:junos:20.2:r3-s4:::::: cpe:2.3:o:juniper:junos:20.2:r3-s5:::::: cpe:2.3:o:juniper:junos:20.2:r3-s6:::::: cpe:2.3:o:juniper:junos:20.4:-:::::: cpe:2.3:o:juniper:junos:20.4:r1:::::: cpe:2.3:o:juniper:junos:20.4:r1-s1:::::: cpe:2.3:o:juniper:junos:20.4:r2:::::: cpe:2.3:o:juniper:junos:20.4:r2-s1:::::: cpe:2.3:o:juniper:junos:20.4:r2-s2:::::: cpe:2.3:o:juniper:junos:20.4:r3:::::: cpe:2.3:o:juniper:junos:20.4:r3-s1:::::: cpe:2.3:o:juniper:junos:20.4:r3-s2:::::: cpe:2.3:o:juniper:junos:20.4:r3-s3:::::: cpe:2.3:o:juniper:junos:20.4:r3-s4:::::: cpe:2.3:o:juniper:junos:20.4:r3-s5:::::: cpe:2.3:o:juniper:junos:21.1:-:::::: cpe:2.3:o:juniper:junos:21.1:r1:::::: cpe:2.3:o:juniper:junos:21.1:r1-s1:::::: cpe:2.3:o:juniper:junos:21.1:r2:::::: cpe:2.3:o:juniper:junos:21.1:r2-s1:::::: cpe:2.3:o:juniper:junos:21.1:r2-s2:::::: cpe:2.3:o:juniper:junos:21.1:r3:::::: cpe:2.3:o:juniper:junos:21.1:r3-s1:::::: cpe:2.3:o:juniper:junos:21.1:r3-s2:::::: cpe:2.3:o:juniper:junos:21.1:r3-s3:::::: cpe:2.3:o:juniper:junos:21.2:-:::::: cpe:2.3:o:juniper:junos:21.2:r1:::::: cpe:2.3:o:juniper:junos:21.2:r1-s1:::::: cpe:2.3:o:juniper:junos:21.2:r1-s2:::::: cpe:2.3:o:juniper:junos:21.2:r2:::::: cpe:2.3:o:juniper:junos:21.2:r2-s1:::::: cpe:2.3:o:juniper:junos:21.2:r2-s2:::::: cpe:2.3:o:juniper:junos:21.2:r3:::::: cpe:2.3:o:juniper:junos:21.2:r3-s1:::::: cpe:2.3:o:juniper:junos:21.2:r3-s2:::::: cpe:2.3:o:juniper:junos:21.2:r3-s3:::::: cpe:2.3:o:juniper:junos:21.3:-:::::: cpe:2.3:o:juniper:junos:21.3:r1:::::: cpe:2.3:o:juniper:junos:21.3:r1-s1:::::: cpe:2.3:o:juniper:junos:21.3:r1-s2:::::: cpe:2.3:o:juniper:junos:21.3:r2:::::: cpe:2.3:o:juniper:junos:21.3:r2-s1:::::: cpe:2.3:o:juniper:junos:21.3:r2-s2:::::: cpe:2.3:o:juniper:junos:21.3:r3:::::: cpe:2.3:o:juniper:junos:21.3:r3-s1:::::: cpe:2.3:o:juniper:junos:21.3:r3-s2:::::: cpe:2.3:o:juniper:junos:21.4:-:::::: cpe:2.3:o:juniper:junos:21.4:r1:::::: cpe:2.3:o:juniper:junos:21.4:r1-s1:::::: cpe:2.3:o:juniper:junos:21.4:r1-s2:::::: cpe:2.3:o:juniper:junos:21.4:r2:::::: cpe:2.3:o:juniper:junos:21.4:r2-s1:::::: cpe:2.3:o:juniper:junos:21.4:r2-s2:::::: cpe:2.3:o:juniper:junos:21.4:r3:::::: cpe:2.3:o:juniper:junos:21.4:r3-s1:::::: cpe:2.3:o:juniper:junos:22.1:r1:::::: cpe:2.3:o:juniper:junos:22.1:r1-s1:::::: cpe:2.3:o:juniper:junos:22.1:r1-s2:::::: cpe:2.3:o:juniper:junos:22.1:r2:::::: cpe:2.3:o:juniper:junos:22.1:r2-s1:::::: cpe:2.3:o:juniper:junos:22.1:r2-s2:::::: cpe:2.3:o:juniper:junos:22.1:r3:::::: cpe:2.3:o:juniper:junos:22.2:r1:::::: cpe:2.3:o:juniper:junos:22.2:r1-s1:::::: cpe:2.3:o:juniper:junos:22.2:r1-s2:::::: cpe:2.3:o:juniper:junos:22.2:r2:::::: cpe:2.3:o:juniper:junos:22.3:r1:::::: cpe:2.3:o:juniper:junos:22.3:r1-s1:::::: Remediation No remediation found in references.
juniper qfx10002	All versions
CPE cpe:2.3:h:juniper:qfx10002:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 28, 2023	Initial Analysis	[email protected]