CVE-2023-36839

Summary

CVE-2023-36839 is a vulnerability affecting Juniper Networks Junos OS and Junos OS Evolved. It allows unauthenticated adjacent attackers to cause a Denial of Service (DoS) by sending specific LLDP packets. This issue occurs during telemetry polling and results in the l2cpd daemon crashing, which in turn reinitializes STP protocols and impact services that depend on LLDP state such as PoE or VoIP recognition. Affected versions of Junos OS include all prior to 20.4R3-S8, 21.1, 21.2 prior to 21.2R3-S5, 21.3 prior to 21.3R3-S4, 21.4 prior to 21.4R3-S3, 22.1 prior to 22.1R3-S2, 22.2 prior to 22.2R3, 22.3 prior to 22.3R2-S2, and 22.4 prior to 22.4R1-S1. For Junos OS Evolved, affected versions are all prior to 20.4R3-S8-EVO, 21.1, 21.2 prior to 21.2R3-S5-EVO, 21.3 prior to 21.3R3-S4-EVO, 21.4 prior to 21.4R3-S3-EVO, 22.1 prior to 22.1R3-S2-EVO, 22.2 prior to 22.2R3-EVO, 22.3 prior to 22.3R2-S2-EVO, and 22.4 prior to 22.4R1-S1-EVO.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.