What is CVE-2023-44181?

CVE-2023-44181 is a high-severity vulnerability in Juniper Junos, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 7.5/10. Published 2023-10-13.

How severe is CVE-2023-44181?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Juniper Junos

CVE-2023-44181

An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a l2 loop resulting in a DDOS violations and DDOS syslog. This issue is triggered when Storm control is enabled and ICMPv6 packets are present on device. This issue affects Juniper Networks: Junos OS * All versions prior to 20.2R3-S6 on QFX5k; * 20.3 versions prior to 20.3R3-S5 on QFX5k; * 20.4 versions prior to 20.4R3-S5 on QFX5k; * 21.1 versions prior to 21.1R3-S4 on QFX5k; * 21.2 versions prior to 21.2R3-S3 on QFX5k; * 21.3 versions prior to 21.3R3-S2 on QFX5k; * 21.4 versions prior to 21.4R3 on QFX5k; * 22.1 versions prior to 22.1R3 on QFX5k; * 22.2 versions prior to 22.2R2 on QFX5k.

Published 2023-10-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.005 (42.7th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 43rd percentile — 42.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

Juniper Junos — versions 20.2, 20.3, 20.4
Juniper Qfk5110
Juniper Qfk5120
Juniper Qfk5130
Juniper Qfk5200
Juniper Qfk5210
Juniper Qfk5220
Juniper Qfk5230
Juniper Qfk5700
Juniper Networks Junos OS — versions 0, 20.3, 20.4

Weakness classification (CWE)

CWE-835 — Loop with Unreachable Exit Condition (Infinite Loop)

References

supportportal.juniper.net/JSA73145 (vendor-advisory, Vendor Advisory)
www.juniper.net/documentation/us/en/software/junos/security-services/topics/tas… (Technical Description, product)

Frequently asked questions

What is CVE-2023-44181?: CVE-2023-44181 is a high-severity vulnerability in Juniper Junos, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 7.5/10. Published 2023-10-13.
How severe is CVE-2023-44181?: High severity. CVSS v3 base score is 7.5 out of 10.