CVE-2023-28980 (junos, junos_os_evolved)

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service (DoS). In a rib sharding scenario the rpd process will crash shortly after specific CLI command is issued. This issue is more likely to occur in a scenario with high route scale (>1M routes). This issue affects: Juniper Networks Junos OS 20.2 version 20.2R3-S5 and later versions prior …

cli command crash cve daemon denial of service dos free issue juniper juniper networks junos junos os locally low networks privileges process protocol routing scenario service sharding vulnerability