csirt@kutim:~/threat-intel/cve/CVE-2023-36831

Katalog CVE

CVSS 7.5 · High EPSS 0,63%

Kerentanan Improper Check or Handling of Exceptional Conditions pada juniper junos. Skor CVSS 3.1 7.5 (High) menurut juniper.net.

Deskripsi (NVD)

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition. Service restoration is only possible by rebooting the system. The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations. Other products, platforms, and configurations are not affected by this vulnerability. This issue affects Juniper Networks Junos OS on SRX Series: 22.2 versions prior to 22.2R3; 22.3 versions prior to 22.3R2-S1, 22.3R3; 22.4 versions prior to 22.4R1-S2, 22.4R2. This issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.

Rincian

Terbit di NVD
14 Juli 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber juniper.net
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-703: Improper Check or Handling of Exceptional Conditions
EPSS (30 hari)
0,63% peluang dieksploitasi; lebih tinggi dari 48,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos Versi 22.2 r1
juniper junos Versi 22.2 r1-s1
juniper junos Versi 22.2 r1-s2
juniper junos Versi 22.2 r2
juniper junos Versi 22.2 r2-s1
juniper junos Versi 22.2 r2-s2
juniper junos Versi 22.3 r1
juniper junos Versi 22.3 r1-s1
juniper junos Versi 22.3 r1-s2
juniper junos Versi 22.3 r2
juniper junos Versi 22.4 r1
juniper junos Versi 22.4 r1-s1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.