CVE-2023-44183 (junos)

An Improper Input Validation vulnerability in the VxLAN packet forwarding engine (PFE) of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices allows an unauthenticated, adjacent attacker, sending two or more genuine packets in the same VxLAN topology to possibly cause a DMA memory leak to occur under various specific operational conditions. The scenario described here is the worst-case scenario. There are other scenarios that require operator action to occur.

An indicator of compromise may be seen when multiple …

attacker conditions cve devices dma engine forwarding input input validation juniper juniper networks junos junos os leak memory memory leak networks operational packet packets scenario series unauthenticated under validation vulnerability