CVE-2023-28980 : What You Need to Know

This CVE-2023-28980 pertains to a Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved. The vulnerability allows a locally authenticated attacker with low privileges to cause Denial of Service (DoS) by crashing the rpd process, particularly in a rib sharding scenario after a specific CLI command is issued.

Understanding CVE-2023-28980

This section delves deeper into the details of the CVE-2023-28980 vulnerability.

What is CVE-2023-28980?

The vulnerability is categorized as a Use After Free issue, impacting Juniper Networks Junos OS and Junos OS Evolved. Specifically, in a scenario with high route scale (>1M routes), the rpd process is susceptible to crashing when a certain CLI command is executed.

The Impact of CVE-2023-28980

The primary impact of this vulnerability is Denial of Service (DoS), where an attacker can disrupt the normal operation of the affected system by crashing the rpd process. This can lead to service interruptions and potential downtime.

Technical Details of CVE-2023-28980

This section provides technical insights into the vulnerability.

Vulnerability Description

The Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved poses a risk of DoS when a locally authenticated attacker triggers a specific CLI command, particularly in rib sharding configurations.

Affected Systems and Versions

Junos OS versions ranging from 20.2 to 22.1 and Junos OS Evolved versions from 20.4 to 22.1 are susceptible to this vulnerability, depending on specific release versions prior to the ones mentioned.

Exploitation Mechanism

The vulnerability can be exploited by a locally authenticated attacker with low privileges, emphasizing the importance of privileged access management and security controls.

Mitigation and Prevention

To address CVE-2023-28980 and enhance security, consider the following mitigation strategies.

Immediate Steps to Take

Update Junos OS Evolved to versions 20.4R3-S6-EVO and later, as well as subsequent releases.
Update Junos OS to versions 20.2R3-S6 and later, along with subsequent releases.

Long-Term Security Practices

Implement access controls to restrict CLI access to the device solely from trusted networks, hosts, and users to minimize the risk of exploitation.

Patching and Updates

Juniper Networks has released software updates to resolve this specific vulnerability. Ensure timely installation of the following updates:

Junos OS Evolved: 20.4R3-S6-EVO, 21.2R3-S4-EVO, 21.3R3-S1-EVO, and subsequent releases.
Junos OS: 20.2R3-S6, 20.3R3-S5, 20.4R3-S4, 21.1R3-S3, and subsequent releases.

It is crucial to stay proactive with security updates and adopt best practices to safeguard against potential vulnerabilities like CVE-2023-28980.