CVE-2023-44181

Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment

HIGH

7.5

CVSS Score

Published: October 12, 2023 at 11:01 PM UTC

Updated: June 17, 2026 at 06:27 AM UTC

9 products affected across 2 vendorsJunosQfk5120Qfk5230

Using Junos OS by Juniper Networks?

Get instant alerts when new vulnerabilities affect Junos OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.6%

SSVC

No known exploit

Description

An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a l2 loop resulting in a DDOS violations and DDOS syslog. This issue is triggered when Storm control is enabled and ICMPv6 packets are present on device. This issue affects Juniper Networks: Junos OS * All versions prior to 20.2R3-S6 on QFX5k; * 20.3 versions prior to 20.3R3-S5 on QFX5k; * 20.4 versions prior to 20.4R3-S5 on QFX5k; * 21.1 versions prior to 21.1R3-S4 on QFX5k; * 21.2 versions prior to 21.2R3-S3 on QFX5k; * 21.3 versions prior to 21.3R3-S2 on QFX5k; * 21.4 versions prior to 21.4R3 on QFX5k; * 22.1 versions prior to 22.1R3 on QFX5k; * 22.2 versions prior to 22.2R2 on QFX5k.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Junos · Juniper Networks

95%

v < 20.2v < 20.2R3-S620.3 ≤ v < 20.3R3-S520.4 ≤ v < 20.4R3-S521.1 ≤ v < 21.1R3-S421.2 ≤ v < 21.2R3-S321.3 ≤ v < 21.3R3-S221.4 ≤ v < 21.4R322.1 ≤ v < 22.1R322.2 ≤ v < 22.2R220.2 20.2 r1 20.2 r1-s1 20.2 r1-s2 20.2 r1-s3 20.2 r2 20.2 r2-s1 20.2 r2-s2 20.2 r2-s3 20.2 r3 20.2 r3-s1 20.2 r3-s2 20.2 r3-s3 20.2 r3-s4 20.2 r3-s5 20.3 20.3 r1 20.3 r1-s1 20.3 r1-s2 20.3 r2 20.3 r2-s1 20.3 r3 20.3 r3-s1 20.3 r3-s2 20.3 r3-s3 20.3 r3-s4 20.4 20.4 r1 20.4 r1-s1 20.4 r2 20.4 r2-s1 20.4 r2-s2 20.4 r3 20.4 r3-s1 20.4 r3-s2 20.4 r3-s3 20.4 r3-s4 21.1 21.1 r1 21.1 r1-s1 21.1 r2 21.1 r2-s1 21.1 r2-s2 21.1 r3 21.1 r3-s1 21.1 r3-s2 21.1 r3-s3 21.2 21.2 r1 21.2 r1-s1 21.2 r1-s2 21.2 r2 21.2 r2-s1 21.2 r2-s2 21.2 r3 21.2 r3-s1 21.2 r3-s2 21.3 21.3 r1 21.3 r1-s1 21.3 r1-s2 21.3 r2 21.3 r2-s1 21.3 r2-s2 21.3 r3 21.3 r3-s1 21.4 21.4 r1 21.4 r1-s1 21.4 r1-s2 21.4 r2 21.4 r2-s1 21.4 r2-s2 22.1 22.1 r1 22.1 r1-s1 22.1 r1-s2 22.1 r2 22.1 r2-s1 22.1 r2-s2 22.2 22.2 r1 22.2 r1-s1 22.2 r1-s2

Affected range stops below 20.2, so it looks safe — our inference, not a vendor statement

Affected range stops below 20.2R3-S6, so it looks safe — our inference, not a vendor statement

Affected range stops below 20.3R3-S5, so it looks safe — our inference, not a vendor statement

Affected range stops below 20.4R3-S5, so it looks safe — our inference, not a vendor statement

Affected range stops below 21.1R3-S4, so it looks safe — our inference, not a vendor statement

Affected range stops below 21.2R3-S3, so it looks safe — our inference, not a vendor statement

Affected range stops below 21.3R3-S2, so it looks safe — our inference, not a vendor statement

Affected range stops below 21.4R3, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.1R3, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.2R2, so it looks safe — our inference, not a vendor statement

juniper-qfk5110 (environment) · juniper-qfk5120 (environment) · juniper-qfk5130 (environment) · juniper-qfk5200 (environment) · juniper-qfk5210 (environment) · juniper-qfk5220 (environment) · juniper-qfk5230 (environment) · juniper-qfk5700 (environment)

Qfk5110 · Juniperdevice

80%

All versions

Qfk5120 · Juniperdevice

80%

All versions

Qfk5130 · Juniperdevice

80%

All versions

Qfk5200 · Juniperdevice

80%

All versions