{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2023-22392", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-22392", "idYear": 2023, "status": "PUBLISHED", "publishedAt": "2023-10-12T22:55:42.016Z", "updatedAt": "2024-08-02T10:07:06.639Z", "importedAt": "2026-10-24T01:56:49.724Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak", "summary": "\nA Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS).\n\nPTX3000, PTX5000, QFX10000, PTX1000, PTX10002, and PTX10004, PTX10008 and PTX10016 with LC110x FPCs do not support certain flow-routes. Once a flow-route is received over an established BGP session and an attempt is made to install the resulting filter into the PFE, FPC heap memory is leaked. The FPC heap memory can be monitored using the CLI command \"show chassis fpc\".\n\nThe following syslog messages can be observed if the respective filter derived from a flow-route cannot be installed.\n\nexpr_dfw_sfm_range_add:661 SFM packet-length Unable to get a sfm entry for updating the hw\nexpr_dfw_hw_sfm_add:750 Unable to add the filter secondarymatch to the hardware\nexpr_dfw_base_hw_add:52 Failed to add h/w sfm data.\nexpr_dfw_base_hw_create:114 Failed to add h/w data.\nexpr_dfw_base_pfe_inst_create:241 Failed to create base inst for sfilter 0 on PFE 0 for __flowspec_default_inet__\nexpr_dfw_flt_inst_change:1368 Failed to create __flowspec_default_inet__ on PFE 0\nexpr_dfw_hw_pgm_fnum:465 dfw_pfe_inst_old not found for pfe_index 0!\nexpr_dfw_bp_pgm_flt_num:548 Failed to pgm bind-point in hw: generic failure\nexpr_dfw_bp_topo_handler:1102 Failed to program fnum.\nexpr_dfw_entry_process_change:679 Failed to change instance for filter __flowspec_default_inet__.\nThis issue affects Juniper Networks Junos OS:\n\non PTX1000, PTX10002, and PTX10004, PTX10008 and PTX10016 with LC110x FPCs:\n\n\n\n * All versions prior to 20.4R3-S5;\n * 21.1 versions prior to 21.1R3-S4;\n * 21.2 versions prior to 21.2R3-S2;\n * 21.3 versions prior to 21.3R3;\n * 21.4 versions prior to 21.4R2-S2, 21.4R3;\n * 22.1 versions prior to 22.1R1-S2, 22.1R2.\n\n\n\n\non PTX3000, PTX5000, QFX10000:\n\n\n\n * All versions prior to 20.4R3-S8;\n * 21.1 version 21.1R1 and later versions;\n * 21.2 versions prior to 21.2R3-S6;\n * 21.3 versions prior to 21.3R3-S5;\n * 21.4 versions prior to 21.4R3-S4;\n * 22.1 versions prior to 22.1R3-S3\n * 22.2 versions prior to 22.2R3-S1\n * 22.3 versions prior to 22.3R2-S2, 22.3R3\n * 22.4 versions prior to 22.4R2.\n\n\n\n\n\n\n", "affected": [ { "vendor": "Juniper Networks", "product": "Junos OS", "platforms": [ "PTX1000", "PTX10002", "PTX10004", "PTX10008", "PTX10016 with LC110x FPCs" ], "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "versionType": "semver", "lessThan": "20.4R3-S5" }, { "version": "21.1", "status": "affected", "versionType": "semver", "lessThan": "21.1R3-S4" }, { "version": "21.2", "status": "affected", "versionType": "semver", "lessThan": "21.2R3-S2" }, { "version": "21.3", "status": "affected", "versionType": "semver", "lessThan": "21.3R3" }, { "version": "21.4", "status": "affected", "versionType": "semver", "lessThan": "21.4R2-S2, 21.4R3" }, { "version": "22.1", "status": "affected", "versionType": "semver", "lessThan": "22.1R1-S2, 22.1R2" } ] }, { "vendor": "Juniper Networks", "product": "Junos OS", "platforms": [ "PTX3000", "PTX5000", "QFX10000" ], "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "versionType": "semver", "lessThan": "20.4R3-S8" }, { "version": "21.1R1", "status": "affected", "versionType": "semver", "lessThan": "21.1*" }, { "version": "21.2", "status": "affected", "versionType": "semver", "lessThan": "21.2R3-S6" }, { "version": "21.3", "status": "affected", "versionType": "semver", "lessThan": "21.3R3-S5" }, { "version": "21.4", "status": "affected", "versionType": "semver", "lessThan": "21.4R3-S4" }, { "version": "22.1", "status": "affected", "versionType": "semver", "lessThan": "22.1R3-S3" }, { "version": "22.2", "status": "affected", "versionType": "semver", "lessThan": "22.2R3-S1" }, { "version": "22.3", "status": "affected", "versionType": "semver", "lessThan": "22.3R2-S2, 22.3R3" }, { "version": "22.4", "status": "affected", "versionType": "semver", "lessThan": "22.4R2" } ] } ] } } }