CVE-2023-44192 (junos)

An Improper Input Validation vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause memory leak, leading to Denial of Service (DoS).

On all Junos OS QFX5000 Series platforms, when pseudo-VTEP (Virtual Tunnel End Point) is configured under EVPN-VXLAN scenario, and specific DHCP packets are transmitted, DMA memory leak is observed. Continuous receipt of these specific DHCP packets will cause memory leak to reach 99% and then cause the protocols to stop …

attacker cve denial of service dhcp dma dos end engine forwarding input input validation juniper juniper networks junos junos os leak memory memory leak network networks packet packets platforms point scenario series service tunnel unauthenticated under validation virtual vulnerability