CVE-2023-44204
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message
An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). When a malformed BGP UPDATE packet is received over an established BGP session, the rpd crashes and restarts. This issue affects both eBGP and iBGP implementations. This issue affects: Juniper Networks Junos OS * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1, 23.2R2; Juniper Networks Junos OS Evolved * 21.4 versions prior to 21.4R3-S5-EVO; * 22.1 versions prior to 22.1R3-S3-EVO; * 22.2 versions prior to 22.2R3-S3-EVO; * 22.3 versions prior to 22.3R2-S2-EVO; * 22.4 versions prior to 22.4R3-EVO; * 23.2 versions prior to 23.2R2-EVO;
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Junos OS
- Vendor
- Juniper Networks
- Product
- Junos OS
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 21.4 | affected | semver | 21.4R3-S4 | Unavailable | None listed |
| 22.1 | affected | semver | 22.1R3-S3 | Unavailable | None listed |
| 22.2 | affected | semver | 22.2R3-S2 | Unavailable | None listed |
| 22.3 | affected | semver | 22.3R2-S2, 22.3R3 | Unavailable | None listed |
| 22.4 | affected | semver | 22.4R2-S1, 22.4R3 | Unavailable | None listed |
| 23.2 | affected | semver | 23.2R1, 23.2R2 | Unavailable | None listed |
Junos OS Evolved
- Vendor
- Juniper Networks
- Product
- Junos OS Evolved
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 21.4-EVO | affected | semver | 21.4R3-S5-EVO | Unavailable | None listed |
| 22.1-EVO | affected | semver | 22.1R3-S3-EVO | Unavailable | None listed |
| 22.2-EVO | affected | semver | 22.2R3-S3-EVO | Unavailable | None listed |
| 22.3-EVO | affected | semver | 22.3R2-S2-EVO | Unavailable | None listed |
| 22.4-EVO | affected | semver | 22.4R3-EVO | Unavailable | None listed |
| 23.2-EVO | affected | semver | 23.2R2-EVO | Unavailable | None listed |