2023-07-14 22:00:28 +00:00
{
"id" : "CVE-2023-36849" ,
"sourceIdentifier" : "sirt@juniper.net" ,
"published" : "2023-07-14T18:15:10.503" ,
2023-07-27 16:00:31 +00:00
"lastModified" : "2023-07-27T14:33:11.483" ,
"vulnStatus" : "Analyzed" ,
2023-07-14 22:00:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS).\n\nWhen a malformed LLDP packet is received, l2cpd will crash and restart. The impact of the l2cpd crash is reinitialization of STP protocols (RSTP, MSTP or VSTP), and MVRP and ERP. Also, if any services depend on LLDP state (like PoE or VoIP device recognition), then these will also be affected. Continued receipt of such packets will lead to a sustained Denial of Service.\n\nThis issue affects:\nJuniper Networks Junos OS\n21.4 versions prior to 21.4R3-S3;\n22.1 versions prior to 22.1R3-S3;\n22.2 versions prior to 22.2R2-S1, 22.2R3;\n22.3 versions prior to 22.3R2.\n\nJuniper Networks Junos OS Evolved\n21.4-EVO versions prior to 21.4R3-S2-EVO;\n22.1-EVO versions prior to 22.1R3-S3-EVO;\n22.2-EVO versions prior to 22.2R2-S1-EVO, 22.2R3-EVO;\n22.3-EVO versions prior to 22.3R2-EVO.\n"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "sirt@juniper.net" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "ADJACENT_NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 6.5 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "sirt@juniper.net" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-703"
}
]
}
] ,
2023-07-27 16:00:31 +00:00
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "9962B01C-C57C-4359-9532-676AB81CE8B0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "62178549-B679-4902-BFDB-2993803B7FCE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "9AD697DF-9738-4276-94ED-7B9380CD09F5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "09FF5818-0803-4646-A386-D7C645EE58A3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "2229FA59-EB24-49A2-85CE-F529A8DE6BA7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "0CB280D8-C5D8-4B51-A879-496ACCDE4538"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "5F3F54F1-75B3-400D-A735-2C27C8CEBE79"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "3F96EBE9-2532-4E35-ABA5-CA68830476A4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "B4D936AE-FD74-4823-A824-2D9F24C25BFB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "E117E493-F4E1-4568-88E3-F243C74A2662"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "01E3E308-FD9C-4686-8C35-8472A0E99F0D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "3683A8F5-EE0E-4936-A005-DF7F6B75DED3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "1B615DBA-8C53-41D4-B264-D3EED8578471"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "B3124DD0-9E42-4896-9060-CB7DD07FC342"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "44F6FD6C-03AF-4D2C-B411-A753DE12A2DA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "D49FFB60-BA71-4902-9404-E67162919ADC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "E949B21B-AD62-4022-9088-06313277479E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8D862E6F-0D01-4B25-8340-888C30F75A2F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "2F28F73E-8563-41B9-A313-BBAAD5B57A67"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "E37D4694-C80B-475E-AB5B-BB431F59C5E1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "19519212-51DD-4448-B115-8A20A40192CC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "5CC9909E-AE9F-414D-99B1-83AA04D5297B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "FDE9E767-4713-4EA2-8D00-1382975A4A15"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "2E907193-075E-45BC-9257-9607DB790D71"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "CEDF46A8-FC3A-4779-B695-2CA11D045AEB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "39809219-9F87-4583-9DAD-9415DD320B36"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB299492-A919-4EBA-A62A-B3CF02FC0A95"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "74ED0939-D5F8-4334-9838-40F29DE3597F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "C6937069-8C19-4B01-8415-ED7E9EAE2CE2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "21DF05B8-EF7E-422F-8831-06904160714C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "750FE748-82E7-4419-A061-2DEA26E35309"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "236E23E5-8B04-4081-9D97-7300DF284000"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "97541867-C52F-40BB-9AAE-7E87ED23D789"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "85CF6664-E35A-4E9B-95C0-CDC91F7F331A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3:*:*:*:*:*:*" ,
"matchCriteriaId" : "E048A05D-882F-4B1C-BA32-3BBA3FEA31A3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "47E8D51D-1424-4B07-B036-E3E195F21AC2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "6F3C82ED-5728-406F-ACF6-D7411B0AB6C0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "D77A072D-350A-42F2-8324-7D3AC1711BF9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "83AE395C-A651-4568-88E3-3600544BF799"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*" ,
"matchCriteriaId" : "B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1:*:*:*:*:*:*" ,
"matchCriteriaId" : "433631CA-3AC4-4D66-9B46-AEA4209347F1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s1:*:*:*:*:*:*" ,
"matchCriteriaId" : "6E4CD8AD-277A-4FC5-A102-3E151060C216"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s2:*:*:*:*:*:*" ,
"matchCriteriaId" : "4BC09BAC-83E7-48CE-B571-ED49277B2987"
}
]
}
]
}
] ,
2023-07-14 22:00:28 +00:00
"references" : [
{
"url" : "https://supportportal.juniper.net/JSA71660" ,
2023-07-27 16:00:31 +00:00
"source" : "sirt@juniper.net" ,
"tags" : [
"Mitigation" ,
"Vendor Advisory"
]
2023-07-14 22:00:28 +00:00
}
]
}
