What is CVE-2023-36833?

CVE-2023-36833 is a medium-severity vulnerability in Juniper Junos_os_evolved, classified under Use After Free. CVSS score: 6.5/10. Published 2023-07-14.

How severe is CVE-2023-36833?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Use After Free in Juniper Junos_os_evolved

CVE-2023-36833

A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of…

Vulnerability class: Use-After-Free

EPSS: 0.003 (23.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Junos_os_evolved — versions 21.2, 21.3, 21.4
Juniper Ptx10001-36mr
Juniper Ptx10004
Juniper Ptx10008
Juniper Ptx10016
Juniper Networks Junos Os Evolved — versions 21.2, 21.3, 21.4

Weakness classification (CWE)

CWE-416 — Use After Free

References

sirt@juniper.net (Vendor Advisory)

Frequently asked questions

What is CVE-2023-36833?: CVE-2023-36833 is a medium-severity vulnerability in Juniper Junos_os_evolved, classified under Use After Free. CVSS score: 6.5/10. Published 2023-07-14.
How severe is CVE-2023-36833?: Medium severity. CVSS v3 base score is 6.5 out of 10.