Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment (Juniper Networks Junos OS)
En bref
- Source
- NVD
- EPSS
- EPSS 0.64 % · centile 50 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- juniper
- Statut NVD
- Modified
Rechercher sur…
Description
An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a l2 loop resulting in a DDOS violations and DDOS syslog. This issue is triggered when Storm control is enabled and ICMPv6 packets are present on device. This issue affects Juniper Networks: Junos OS * All versions prior to 20.2R3-S6 on QFX5k; * 20.3 versions prior to 20.3R3-S5 on QFX5k; * 20.4 versions prior to 20.4R3-S5 on QFX5k; * 21.1 versions prior to 21.1R3-S4 on QFX5k; * 21.2 versions prior to 21.2R3-S3 on QFX5k; * 21.3 versions prior to 21.3R3-S2 on QFX5k; * 21.4 versions prior to 21.4R3 on QFX5k; * 22.1 versions prior to 22.1R3 on QFX5k; * 22.2 versions prior to 22.2R2 on QFX5k.
Faiblesses (CWE)
- CWE-835 — Boucle dont la condition de sortie est inatteignable (boucle infinie)
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | juniper |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · sirt@juniper.net (Secondary) |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-48540
- GCVE · GCVE-0-2023-44181
Avis du CERT-FR
- CERTFR-2023-AVI-0836 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*< 20.2cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.2:r3-s5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*- +44 autres
Produits affectés
| Produit | Versions |
|---|---|
| Juniper Networks · Junos OS | affected 0 < 20.2R3-S6 ; affected 20.3 < 20.3R3-S5 ; affected 20.4 < 20.4R3-S5 ; affected 21.1 < 21.1R3-S4 ; affected 21.2 < 21.2R3-S3 ; affected 21.3 < 21.3R3-S2 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |