CVE-2023-44198— Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-44198
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets
Source: NVD (National Vulnerability Database)
Vulnerability Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a specifically malformed SIP packet, the device prevents this packet from being forwarded, but any subsequently received retransmissions of the same packet are forwarded as if they were valid. This issue affects Juniper Networks Junos OS on SRX Series and MX Series: * 20.4 versions prior to 20.4R3-S5; * 21.1 versions prior to 21.1R3-S4; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S3; * 21.4 versions prior to 21.4R3-S2; * 22.1 versions prior to 22.1R2-S2, 22.1R3; * 22.2 versions prior to 22.2R2-S1, 22.2R3; * 22.3 versions prior to 22.3R1-S2, 22.3R2. This issue doesn't not affected releases prior to 20.4R1.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
对因果或异常条件的不恰当检查
Source: NVD (National Vulnerability Database)
Vulnerability Title
Juniper Networks Junos OS 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在代码问题漏洞，该漏洞源于 SIP ALG 中存在对异常或异常条件的不当检查漏洞，允许未经身份验证的基于网络的攻击者对连接网络的完整性造成影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 20.4 ~ 20.4R3-S5 | - |
II. Public POCs for CVE-2023-44198
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-44198
请登录查看更多情报信息。
- https://supportportal.juniper.net/JSA73164vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-44198
Same Patch Batch · Juniper Networks · 2023-10-12 · 25 CVEs total
| CVE-2023-44194 | 8.4 HIGH | Junos OS: An unauthenticated attacker with local access to the device can create a backdoo |
| CVE-2023-44199 | 7.5 HIGH | Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an F |
| CVE-2023-44197 | 7.5 HIGH | Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned |
| CVE-2023-36841 | 7.5 HIGH | Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service |
| CVE-2023-36843 | 7.5 HIGH | Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP i |
| CVE-2023-44192 | 7.5 HIGH | Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are trans |
| CVE-2023-44191 | 7.5 HIGH | Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN |
| CVE-2023-44185 | 7.5 HIGH | Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processin |
| CVE-2023-44181 | 7.5 HIGH | Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment |
| CVE-2023-44182 | 7.3 HIGH | Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affe |
| CVE-2023-44184 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command |
| CVE-2023-22392 | 6.5 MEDIUM | Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as t |
| CVE-2023-36839 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are re |
| CVE-2023-44175 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash |
| CVE-2023-44183 | 6.5 MEDIUM | Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within t |
| CVE-2023-44204 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE me |
| CVE-2023-44196 | 6.5 MEDIUM | Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach |
| CVE-2023-44203 | 6.5 MEDIUM | Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will |
| CVE-2023-44178 | 5.5 MEDIUM | Junos OS : Stack overflow vulnerability in CLI command processing |
| CVE-2023-44176 | 5.5 MEDIUM | Junos OS : Stack overflow vulnerability in CLI command processing |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33781
Junos OS: EX Series, QFX Series: In a VXLAN scenario when sp
Same vendor: Juniper Networks
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33784
JSI Virtual Lightweight Collector: Default password is not r
Same weakness: CWE-754
- CVE-2026-41662
Admidio: Missing Minimum Administrator Check in Role Members - CVE-2026-35225
Improper timeout handling in CODESYS EtherNetIP - CVE-2026-35366
uutils coreutils printenv Security Inspection Bypass via UTF - CVE-2026-40343
free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPos - CVE-2026-40249
free5gc UDR fail-open request handling in PolicyDataSubsToNo
V. Comments for CVE-2023-44198
No comments yet