An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). If an affected device receives a specifically malformed first ISAKMP packet from the initiator, the kmd/iked process will crash and restart, which momentarily prevents new security associations (SAs) for from being established. Repeated exploitation of this vulnerability causes a complete inability to establish new VPN connections.
This issue affects Junos OS on SRX Series and MX Series: * all versions before 22.4R3-S9, * 23.2 version before 23.2R2-S6, * 23.4 version before 23.4R2-S7, * 24.2 versions before 24.2R2-S4, * 24.4 versions before 24.4R2-S3, * 25.2 versions before 25.2R1-S2, 25.2R2.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 85
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Juniper Junos
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
|
— |
22.4
|
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:22.4:r3-s8:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.2:r2-s5:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r2-s5:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:23.4:r2-s6:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.2:r2-s3:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.4:r2-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:24.4:r2-s2:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:25.2:r1-s1:*:*:*:*:*:*
|
— | — |
|
Juniper Junos
cpe:2.3:o:juniper:junos:25.2:r2:*:*:*:*:*:*
|
— | — |
|
Juniper Mx10004
cpe:2.3:h:juniper:mx10004:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx10008
cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx2008
cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx2010
cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx2020
cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx204
cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx240
cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx301
cpe:2.3:h:juniper:mx301:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx304
cpe:2.3:h:juniper:mx304:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx480
cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Mx960
cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx1500
cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx1600
cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx2300
cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx300
cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx320
cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx340
cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx345
cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx380
cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx4100
cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx4120
cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx4200
cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx4300
cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx4600
cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx4700
cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx5400
cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx5600
cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*
|
— | — |
|
Juniper Srx5800
cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*
|
— | — |