An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon (mgd) process of Juniper Networks Junos OS and Junos OS Evolved allows a network-based authenticated low-privileged attacker, by executing a specific command via NETCONF, to cause a CPU Denial of Service to the device's control plane. This issue affects: Juniper Networks Junos OS * All versions prior to 20.4R3-S7; * 21.2 versions prior to 21.2R3-S5; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S2; * 22.2 versions prior to 22.2R3; * 22.3 versions prior to 22.3R2-S1, 22.3R3; * 22.4 versions prior to 22.4R1-S2, 22.4R2. Juniper Networks Junos OS Evolved * All versions prior to 21.4R3-
The following software releases have been updated to resolve this specific issue: Junos OS: 20.4R3-S7, 21.2R3-S5, 21.3R3-S5, 21.4R3-S4, 22.1R3-S2, 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.2R1, and all subsequent releases. Junos OS Evolved 21.4R3-S4-EVO, 22.1R3-S2-EVO, 22.2R3-EVO, 22.3R3-EVO, 22.4R2-EVO, 23.2R1-EVO, and all subsequent releases.
There are no known workarounds for this issue. The impact of this issue may be temporarily cleared by periodically restarting the management daemon. To reduce the risk of exploitation enable access control lists (ACLs) and other filtering mechanisms to limit access to the device only from trusted hosts and networks to the NETCONF service.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Juniper Networks Junos OS | <20.4R3-S7 | 20.4R3-S7 | advisory ↗ |
| Juniper Networks Junos OS | >=21.1<21.1R1 | 21.1R1 | advisory ↗ |
| Juniper Networks Junos OS | >=21.2<21.2R3-S5 | 21.2R3-S5 | advisory ↗ |
| Juniper Networks Junos OS | >=21.3<21.3R3-S5 | 21.3R3-S5 | advisory ↗ |
| Juniper Networks Junos OS | >=21.4<21.4R3-S4 | 21.4R3-S4 | advisory ↗ |
| Juniper Networks Junos OS | >=22.1<22.1R3-S2 | 22.1R3-S2 | advisory ↗ |
| Juniper Networks Junos OS | >=22.2<22.2R3 | 22.2R3 | advisory ↗ |
| Juniper Networks Junos OS | >=22.3<22.3R2-S1, 22.3R3 | 22.3R2-S1, 22.3R3 | advisory ↗ |
| Juniper Networks Junos OS | >=22.4<22.4R1-S2, 22.4R2 | 22.4R1-S2, 22.4R2 | advisory ↗ |
| Juniper Networks Junos OS Evolved | <21.4R3-S4-EVO | 21.4R3-S4-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=22.1<22.1R3-S2-EVO | 22.1R3-S2-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=22.2<22.2R3-EVO | 22.2R3-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=22.3<22.3R3-EVO | 22.3R3-EVO | advisory ↗ |
| Juniper Networks Junos OS Evolved | >=22.4<22.4R2-EVO | 22.4R2-EVO | advisory ↗ |