CVE-2023-36840

Summary

CVE-2023-36840 is a Reachable Assertion vulnerability affecting the Routing Protocol Daemon (RPD) in Juniper Networks Junos OS and Junos OS Evolved. This issue allows a locally-based, low-privileged attacker to cause a Denial of Service (DoS) by executing a specific L2VPN command that causes RPD to crash and restart. The continued execution of this command results in a sustained DoS condition. Affected versions of Junos OS include all releases prior to 19.3R3-S10, 20.1 versions prior to 20.1R3-S4, 20.2 versions prior to 20.2R3-S6, 20.3 versions prior to 20.3R3-S6, 20.4 versions prior to 20.4R3-S5, 21.1 versions prior to 21.1R3-S4, 21.2 versions prior to 21.2R3-S3, 21.3 versions prior to 21.3R3-S2, 21.4 versions prior to 21.4R3, 22.1 versions prior to 22.1R3, 22.2 versions prior to 22.2R2, 22.3 versions prior to 22.3R2. Affected versions of Junos OS Evolved include all releases prior to 20.4R3-S7-EVO, 21.1 versions prior to 21.1R3-S3-EVO, 21.2 versions prior to 21.2R3-S5-EVO, 21.3 versions prior to 21.3R3-S4-EVO, 21.4 versions prior to 21.4R3-EVO, 22.1 versions prior to 22.1R3-EVO, 22.2 versions prior to 22.2R2-EVO, and 22.3 versions prior to 22.3R2-EVO.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.