CVE:CVE-2023-36849
CNNVD:CNNVD-202307-1335
Juniper Networks Junos OS和Juniper Networks Junos OS Evolved都是美国瞻博网络（Juniper Networks）公司的产品。Juniper Networks Junos OS是一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。Juniper Networks Junos OS Evolved是Junos OS 的升级版系统。
Juniper Networks Junos OS和Junos OS Evolved存在安全漏洞，该漏洞源于第二层控制协议守护程序(l2cpd)存在对异常情况检查不当问题。攻击者可利用该漏洞造成拒绝服务（DoS）。受影响的产品和版本：Juniper Networks Junos OS 21.4R3-S3之前的21.4版本；22.1R3-S3之前的22.1版本；22.2R2-S1、22.2R3之前的22.2版本；22.3R2 之前的22.3版本。Juniper Networks Junos OS Evolved：21.4R3-S2-EVO之前的21.4-EVO版本；22.1R3-S3-EVO之前的22.1-EVO版本；22.2R2-S1-EVO、22.2R3-EVO之前的22.2-EVO版本；22.3R2-EVO之前的22.3-EVO版本。
solution:Upgrade juniper junos to a higher version than 21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2,21.4:r2,21.4:r2-s1,21.4:r2-s2,21.4:r3,21.4:r3-s1,21.4:r3-s2,22.1:r1,22.1:r1-s1,22.1:r1-s2,22.1:r2,22.1:r2-s1,22.1:r2-s2,22.1:r3,22.1:r3-s1,22.1:r3-s2,22.2:r1,22.2:r1-s1,22.2:r1-s2,22.2:r2,22.3:r1,22.3:r1-s1,22.3:r1-s2,and avoid the version 21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2,21.4:r2,21.4:r2-s1,21.4:r2-s2,21.4:r3,21.4:r3-s1,21.4:r3-s2,22.1:r1,22.1:r1-s1,22.1:r1-s2,22.1:r2,22.1:r2-s1,22.1:r2-s2,22.1:r3,22.1:r3-s1,22.1:r3-s2,22.2:r1,22.2:r1-s1,22.2:r1-s2,22.2:r2,22.3:r1,22.3:r1-s1,22.3:r1-s2; Upgrade juniper junos_os_evolved to a higher version than 21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2,21.4:r2,21.4:r2-s1,21.4:r2-s2,21.4:r3,21.4:r3-s1,22.1:r1,22.1:r1-s1,22.1:r1-s2,22.1:r2,22.1:r2-s1,22.1:r3,22.1:r3-s1,22.1:r3-s2,22.2:r1,22.2:r1-s1,22.2:r2,22.3:r1,22.3:r1-s1,22.3:r1-s2,and avoid the version 21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2,21.4:r2,21.4:r2-s1,21.4:r2-s2,21.4:r3,21.4:r3-s1,22.1:r1,22.1:r1-s1,22.1:r1-s2,22.1:r2,22.1:r2-s1,22.1:r3,22.1:r3-s1,22.1:r3-s2,22.2:r1,22.2:r1-s1,22.2:r2,22.3:r1,22.3:r1-s1,22.3:r1-s2