CVE-2023-36831: Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-14 · updated 2026-06-17
Weakness: CWE-703

Description

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition. Service restoration is only possible by rebooting the system. The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations. Other products, platforms, and configurations are not affected by this vulnerability. This issue affects Juniper Networks Junos OS on SRX Series: 22.2 versions prior to 22.2R3; 22.3 versions prior to 22.3R2-S1, 22.3R3; 22.4 versions prior to 22.4R1-S2, 22.4R2. This issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.

Affected products

Juniper Junos OS: 22.2-r1, 22.2-r1-s1, 22.2-r1-s2, 22.2-r2, 22.2-r2-s1, 22.2-r2-s2 (+6)

References

Get alerted when CVE-2023-36831 or the next vulnerability affects your stack