Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-44204 Details

Description

An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). When a malformed BGP UPDATE packet is received over an established BGP session, the rpd crashes and restarts. This issue affects both eBGP and iBGP implementations. This issue affects: Juniper Networks Junos OS * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1, 23.2R2; Juniper Networks Junos OS Evolved * 21.4 versions prior to 21.4R3-S5-EVO; * 22.1 versions prior to 22.1R3-S3-EVO; * 22.2 versions prior to 22.2R3-S3-EVO; * 22.3 versions prior to 22.3R2-S2-EVO; * 22.4 versions prior to 22.4R3-EVO; * 23.2 versions prior to 23.2R2-EVO;

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

Weakness Enumeration

CWE-IDCWE NameSource
CWE-20Improper Input Validation[email protected]
CWE-1286Improper Validation of Syntactic Correctness of Input[email protected]

Affected Products

ProductVersions
juniper junos
21.4 -
21.4 r1
21.4 r1-s1
21.4 r1-s2
21.4 r2

CPE

  • cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*

Remediation

  • No remediation found in references.
juniper junos os evolved
21.4 -
21.4 r1
21.4 r1-s1
21.4 r1-s2
21.4 r2

CPE

  • cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s4:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.3:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.3:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.3:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.4:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.4:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:22.4:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2023-44204
NVD Published Date:
Oct 13, 2023
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2023-44204 Details - Not Deferred