An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention (IDP) of Juniper Networks SRX Series and MX Series allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). Continued receipt of this specific packet will cause a sustained Denial of Service condition.
On all SRX Series and MX Series platforms, where IDP is enabled and a specific malformed SSL packet is received, the SSL detector crashes leading to an FPC core.
This issue affects Juniper Networks SRX Series and MX Series prior to SigPack 3598.
In order to identify the current SigPack version, following command can be used:
user@junos# show security idp security-package-version
References
| Link | Resource |
|---|---|
| https://supportportal.juniper.net/JSA71662 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
27 Jul 2023, 13:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://supportportal.juniper.net/JSA71662 - Vendor Advisory | |
| CPE | cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:* cpe:2.3:o:juniper:junos:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:* cpe:2.3:a:juniper:vsrx:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:* |
|
| First Time |
Juniper srx550
Juniper csrx Juniper mx2010 Juniper srx5400 Juniper mx150 Juniper mx960 Juniper srx110 Juniper mx240 Juniper vsrx Juniper mx480 Juniper srx4100 Juniper mx80 Juniper srx5600 Juniper srx5800 Juniper srx240m Juniper mx5 Juniper srx300 Juniper mx10016 Juniper mx10003 Juniper srx1400 Juniper srx220 Juniper srx340 Juniper srx3400 Juniper mx204 Juniper srx1500 Juniper srx100 Juniper junos Juniper srx320 Juniper srx4000 Juniper mx10 Juniper srx550m Juniper mx104 Juniper srx210 Juniper srx4200 Juniper mx10008 Juniper srx4600 Juniper srx345 Juniper srx240h2 Juniper srx550 Hm Juniper mx10000 Juniper srx5000 Juniper mx2020 Juniper srx650 Juniper mx2008 Juniper srx3600 Juniper Juniper srx380 Juniper mx40 Juniper srx240 |
14 Jul 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-14 17:15
Updated : 2023-07-27 13:02
NVD link : CVE-2023-28985
Mitre link : CVE-2023-28985
JSON object : View
Products Affected
juniper
- srx380
- mx960
- junos
- mx2020
- srx1500
- mx10000
- mx10003
- srx3400
- srx240h2
- mx10
- mx150
- mx104
- srx300
- mx2010
- srx220
- srx4000
- mx2008
- srx5000
- srx550_hm
- srx5600
- vsrx
- mx10016
- mx40
- srx345
- srx5400
- srx210
- srx100
- mx204
- mx240
- srx110
- mx10008
- csrx
- srx320
- srx4600
- mx480
- srx550m
- srx1400
- srx340
- srx550
- srx3600
- mx5
- srx4100
- srx4200
- srx240
- srx650
- mx80
- srx240m
- srx5800
CWE
CWE-1286
Improper Validation of Syntactic Correctness of Input