CVE-2023-22397

CVE-2023-22397 is a memory management vulnerability in Juniper Networks Junos OS Evolved on PTX10003 Series devices, specifically an Allocation of Resources Without Limits or Throttling weakness in the Packet Forwarding Engine (PFE). An adjacent attacker can trigger a memory leak via a Time-of-check Time-of-use (TOCTOU) Race Condition, leading to a Distributed Denial of Service (DDoS) event and cascading outages across vulnerable devices, ultimately causing reboots within 1.5 days. The vulnerability has a CVSS score of 6.1 (Medium), indicating an adjacent attack vector with high attack complexity, but a high impact on availability. While no confidentiality or integrity is compromised, the sustained DDoS can force device reboots. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness or active threat intelligence.