CVE-2023-28979
Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails
- Published
- Updated
- Reserved
- Assigned by
- juniper
Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario and if an additional integrity check is configured, it will fail to drop specific malformed IPv6 packets, and then these packets will be forwarded to other connected networks. This issue affects Juniper Networks Junos OS: All versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R2; 22.2 versions prior to 22.2R2.
Timeline
ID reserved
By juniper
- 19 days later
· 19 days later
Published
- 23 months later
· 23 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| juniperCNA (assigner) | 3.1 | Medium4.7 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
| NVDNVD · Modified | 3.1 | Medium4.7 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
- EPSS (exploitation in 30 days)
- 0.27% · top 80% of all CVEs (8 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.7.
Weakness
Affected products
- affected unspecified – < 19.3R3-S7
- affected 19.4 – < 19.4R3-S9
- affected 20.2 – < 20.2R3-S7
- affected 20.3 – < 20.3R3-S5
- affected 20.4 – < 20.4R3-S4
- affected 21.1 – < 21.1R3-S3
- affected 21.2 – < 21.2R3-S2
- affected 21.3 – < 21.3R3-S1
- affected 21.4 – < 21.4R2-S1, 21.4R3
- affected 22.1 – < 22.1R2
- affected 22.2 – < 22.2R2
What to do
Solution: The following software releases have been updated to resolve this specific issue: 19.3R3-S7, 19.4R3-S9, 20.2R3-S7, 20.3R3-S5, 20.4R3-S4, 21.1R3-S3, 21.2R3-S2, 21.3R3-S1, 21.4R2-S1, 21.4R3, 22.1R2, 22.2R2, 22.3R1, and all subsequent releases.
Workaround: There are no known workarounds for this issue.
Exploitation: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2023-28979)Record last updated .