CVE-2023-36838 (junos)

An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a local, authenticated attacker with low privileges, to cause a Denial of Service (DoS).

If a low privileged user executes a specific CLI command, flowd which is responsible for traffic forwarding in SRX crashes and generates a core dump. This will cause temporary traffic interruption until the flowd process is restarted automatically. Continued execution of this command will lead to a …

cli command crashes cve daemon denial of service dos flow forwarding juniper juniper networks junos junos os local low networks out-of-bounds privileged privileged user privileges responsible series service traffic vulnerability