Vulnerability Details : CVE-2023-36831
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition. Service restoration is only possible by rebooting the system.
The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations. Other products, platforms, and configurations are not affected by this vulnerability.
This issue affects Juniper Networks Junos OS on SRX Series:
22.2 versions prior to 22.2R3;
22.3 versions prior to 22.3R2-S1, 22.3R3;
22.4 versions prior to 22.4R1-S2, 22.4R2.
This issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.
Vulnerability category: Denial of service
Products affected by CVE-2023-36831
- cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-36831
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 34 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-36831
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
Juniper Networks, Inc. |
CWE ids for CVE-2023-36831
-
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.Assigned by: sirt@juniper.net (Primary)
References for CVE-2023-36831
-
https://supportportal.juniper.net/JSA71636
2023-07 Security Bulletin: Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied (CVE-2023-36831)Vendor Advisory
Jump to