Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-36841 Details

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows a unauthenticated network-based attacker to cause an infinite loop, resulting in a Denial of Service (DoS). An attacker who sends malformed TCP traffic via an interface configured with PPPoE, causes an infinite loop on the respective PFE. This results in consuming all resources and a manual restart is needed to recover. This issue affects interfaces with PPPoE configured and tcp-mss enabled. This issue affects Juniper Networks Junos OS * All versions prior to 20.4R3-S7; * 21.1 version 21.1R1 and later versions; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S3; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3; * 22.3 versions prior to 22.3R2-S2; * 22.4 versions prior to 22.4R2;

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

Weakness Enumeration

CWE-IDCWE NameSource
CWE-400Uncontrolled Resource Consumption[email protected]
CWE-400Uncontrolled Resource Consumption[email protected]

Affected Products

ProductVersions
juniper junos
< 20.4
20.4 -
20.4 r1
20.4 r1-s1
20.4 r2

CPE

  • cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2023-36841
NVD Published Date:
Oct 12, 2023
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2023-36841 Details - Not Deferred