CVE-2023-36836

Summary

CVE-2023-36836 is a Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This issue allows a local, authenticated attacker with low privileges to cause a Denial of Service (DoS) by executing a specific command in a Multicast only Fast Reroute (MoFRR) scenario. The rpd process crashes, impacting all routing protocols until it is automatically restarted. This vulnerability is considered difficult to exploit as the operational state required for exploitation is outside the attacker's control. Affected versions of Junos OS include 19.4R3-S5 and later versions prior to 19.4R3-S9, 20.1R2 and later versions, 20.2 versions prior to 20.2R3-S7, 20.3 versions prior to 20.3R3-S5, 20.4 versions prior to 20.4R3-S6, 21.1 versions prior to 21.1R3-S4, 21.2 versions prior to 21.2R3-S2, 21.3 versions prior to 21.3R3-S1, and 21.4 versions prior to 21.4R3. Affected versions of Junos OS Evolved include all versions prior to 20.4R3-S6-EVO, 21.1-EVO version 21.1R1-EVO and later versions, 21.2-EVO version 21.2R1-EVO and later versions, 21.3-EVO versions prior to 21.3R3-S1-EVO, 21.4-EVO versions prior to 21.4R3-EVO, 22.1-EVO versions prior to 22.1R1-S2-EVO, 22.1R2-EVO, 22.2-EVO versions prior to 22.2R2-EVO.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.