安全研究

安全漏洞
Juniper Networks Junos OS Evolved on PTX10003竞争条件漏洞(CVE-2023-22397)

发布日期:2023-01-12
更新日期:2023-04-17

受影响系统:
Juniper Networks Junos OS Evolved on PTX10003
描述:
CVE(CAN) ID: CVE-2023-22397

Juniper Networks Junos OS是美国瞻博网络(Juniper Networks)公司的一套专用于该公司的硬件设备的网络操作系统,该操作系统提供了安全编程接口和Junos SDK。
Juniper Networks Junos OS Evolved on PTX10003的Packet Forwarding Engine存在竞争条件漏洞,攻击者可利用该漏洞导致内存泄漏,从而导致拒绝服务。

<*链接:https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Evolved-PTX10003-An-a
*>

建议:
厂商补丁:

Juniper Networks
----------------
Juniper Networks已经为此发布了一个安全公告(JSA70193)以及相应补丁:
JSA70193:2023-01 Security Bulletin: Junos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service (CVE-2023-22397)
链接:https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Evolved-PTX10003-An-attacker-sending-specific-genuine-packets-will-cause-a-memory-leak-in-the-PFE-leading-to-a-Denial-of-Service-CVE-2023-22397?language=en_US

浏览次数:493
严重程度:0(网友投票)
本安全漏洞由绿盟科技翻译整理,版权所有,未经许可,不得转载
绿盟科技给您安全的保障