CVE-2023-22404 (junos)

An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon (iked) of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an authenticated, network-based attacker to cause a Denial of Service (DoS). iked will crash and restart, and the tunnel will not come up when a peer sends a specifically formatted payload during the negotiation. This will impact other IKE negotiations happening at the same time. Continued receipt of this specifically formatted payload will lead to …

crash cve daemon denial of service dos exchange ike impact internet juniper juniper networks junos junos os key negotiation network networks out-of-bounds out-of-bounds write payload protocol series service tunnel vulnerability