CVE-2023-44188

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Oct 11, 2023
Updated: Feb 21, 2024
CWE ID 367

Summary

CVE-2023-44188 is a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Juniper Networks Junos OS that allows a network-based authenticated attacker to flood the system with multiple telemetry requests, leading to a Denial of Service (DoS) by crashing the Junos Kernel Debugging Streaming Daemon (jkdsd) process. This vulnerability affects all Junos platforms and is triggered when multiple telemetry requests come from different collectors. As the load increases, the Dynamic Rendering Daemon (drend) defers processing, causing a timing issue that accesses stale memory and crashes the jkdsd process. The affected versions range from 20.4 to 23.2 of Junos OS, excluding versions prior to 19.4R1. Organizations should update their Junos OS to versions that are not vulnerable to mitigate the risk of this DoS attack.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-44188 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options