QID 44185

Juniper Junos is the network operating system used in Juniper Networks hardware systems.

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS).

Affected Juniper Networks Junos OS versions:
All versions prior to 20.4R3-S10
21.2 versions prior to 21.2R3-S7
21.4 versions prior to 21.4R3-S5
22.1 versions prior to 22.1R3-S4
22.2 versions prior to 22.2R3-S3
22.3 versions prior to 22.3R3-S1
22.4 versions prior to 22.4R3
23.2 versions prior to 23.2R1-S2, 23.2R2

NOTE:
To be affected by this issue, the following configuration is required on the device: [ security ike proposal <name> authentication-method rsa-signatures ]

QID detection logic: (Authenticated)
This QID checks for vulnerable Junos OS version.

QID detection logic: (Unauthenticated)
This QID checks SNMP banner for vulnerable version of JunOS.

Successful exploitation of this vulnerability may allow an unauthenticated networked attacker to cause Denial of Service (DoS).