Main Vulnerability Database Vulnerabilities #VU82254

Unchecked return value to null pointer dereference in Junos OS and Junos OS Evolved - CVE-2023-44182

Published: October 19, 2023

Vulnerability identifier: #VU82254

CSH Severity: Medium

CVSS v4: 8.4 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-44182

CWE-ID:

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote authenticated user to read and manipulate data.

The vulnerability exists due to unchecked return value error in the user interfaces. A remote authenticated user can read and manipulate data.

The vulnerability affects multiple user interfaces, such as CLI, the XML API, the XML Management Protocol, the NETCONF Management Protocol, the gNMI interfaces, and the J-Web User.

Affected software

Junos OS
Junos OS Evolved

How to mitigate CVE-2023-44182

Install updates from vendor's website.

Junos OS - addressed in versions 20.4R3-S7, 21.1R3-S5, 21.2R3-S4, 21.2R3-S5, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R2-S2, 22.2R3, 22.3R1-S2, 22.3R2, 22.3R3, 22.4R1
Junos OS Evolved - addressed in versions 21.4R3-S3-EVO, 22.2R2-S2-EVO, 22.2R3-EVO, 22.3R1-S2-EVO, 22.3R2-EVO, 22.4R1-EVO

External References

https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-Unchecked-Return-Value-in-multiple-users-interfaces-affects-confidentiality-and-integrity-of-device-operations-CVE-2023-44182

Related Security Bulletins