CVSS: 7.5EPSS: 0%CPEs: 37EXPL: 0CVE-2017-2348 – Junos OS: jdhcpd daemon crash due to invalid IPv6 UDP packets
https://notcve.org/view.php?id=CVE-2017-2348
14 Jul 2017 — The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S18, 15.1R4 o... • http://www.securitytracker.com/id/1038899 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.8EPSS: 0%CPEs: 134EXPL: 0CVE-2017-2344 – Junos: Buffer overflow in sockets library
https://notcve.org/view.php?id=CVE-2017-2344
14 Jul 2017 — A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service (kernel panic) or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running on the device itself, and veriexec restricts arbitrary programs from running on Junos OS. There are no known exploit vectors utilizing signed binaries shipped with Junos OS itself. Affected releases are Juniper N... • http://www.securityfocus.com/bid/99556 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 75EXPL: 0CVE-2017-2314 – Junos: RPD crash due to malformed BGP OPEN message
https://notcve.org/view.php?id=CVE-2017-2314
14 Jul 2017 — Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. By continuously sending specially crafted BGP OPEN messages, an attacker can repeatedly crash the rpd process causing prolonged denial of service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R12-S4, 12.3R13, 12.3R3-S4; 12.3X48 prior to 12.3X48-D50; 13.3 prior to 13.3R4-S11, 13.3R10; 14.1 prior to 14... • http://www.securitytracker.com/id/1038889 • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 0%CPEs: 135EXPL: 0CVE-2017-2341 – Junos OS: VM to host privilege escalation in platforms with Junos OS running in a virtualized environment.
https://notcve.org/view.php?id=CVE-2017-2341
14 Jul 2017 — An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D40 on QFX5110, QFX5200, QFX10002, QFX10008, QFX10016, EX4600 and NFX250; 15.1 prior to 15.1R5 on EX4600; 15.1X49 prior to 15.1X49-D70 on vSRX, SRX1500, SRX4100, SRX4200; 16.1 prior to... • http://www.securitytracker.com/id/1038893 • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 25EXPL: 0CVE-2017-10603 – Junos OS: Local XML Injection through CLI command can lead to privilege escalation
https://notcve.org/view.php?id=CVE-2017-10603
14 Jul 2017 — An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 15.1X53 prior to 15.1X53-D47, 15.1 prior to 15.1R3. Junos versions prior to 15.1 are not affected. No other Juniper Networks products or platforms are affected by this issue. • http://www.securitytracker.com/id/1038901 • CWE-91: XML Injection (aka Blind XPath Injection) •
CVSS: 8.6EPSS: 0%CPEs: 47EXPL: 0CVE-2017-10605 – Junos: SRX Series denial of service vulnerability in flowd due to crafted DHCP packet
https://notcve.org/view.php?id=CVE-2017-10605
14 Jul 2017 — On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the device(s). Repeated crashes of the flowd process may constitute an extended denial of service condition for the device(s). If the device is configured in high-availability, the RG1+ (data-plane) will fail-over to the secondary node. If the device is configured in stand-alone, there will be temporary traffic in... • http://www.securitytracker.com/id/1038891 • CWE-20: Improper Input Validation •
CVSS: 5.3EPSS: 0%CPEs: 34EXPL: 0CVE-2017-10604 – Junos OS: SRX Series: Cluster configuration sync failures occur if the root user account is locked out
https://notcve.org/view.php?id=CVE-2017-10604
14 Jul 2017 — When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the root account. When an SRX Series device is in cluster mode, and a cluster sync or failover operation occurs, then there will be errors associated with synch or failover while the root account is locked out. Administrators can confirm if the root account is locked out via the following command root@device> show sy... • http://www.securitytracker.com/id/1038886 • CWE-307: Improper Restriction of Excessive Authentication Attempts •
CVSS: 7.8EPSS: 0%CPEs: 71EXPL: 0CVE-2017-2302
https://notcve.org/view.php?id=CVE-2017-2302
30 May 2017 — On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R6, 15.1 prior to 15.1F2 or 15.1R1, 15.1X49 prior to 15.1X49-D20 where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options, a network based attacker can cause the Junos ... • http://www.securityfocus.com/bid/95394 •
CVSS: 7.8EPSS: 0%CPEs: 96EXPL: 0CVE-2017-2303
https://notcve.org/view.php?id=CVE-2017-2303
30 May 2017 — On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R5, 15.1 prior to 15.1F6 or 15.1R3, 15.1X49 prior to 15.1X49-D30 or 15.1X49-D40, 15.1X53 prior to 15.1X53-D35, and where RIP is enabled, certain RIP advertisements received by the router ... • http://www.securityfocus.com/bid/95408 •
CVSS: 7.8EPSS: 1%CPEs: 103EXPL: 0CVE-2017-2301
https://notcve.org/view.php?id=CVE-2017-2301
30 May 2017 — On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 or 12.3R13, 12.3X48 prior to 12.3X48-D40, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D12 or 14.1X53-D35, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R7, 15.1 prior to 15.1F6 or 15.1R3, 15.1X49 prior to 15.1X49-D60, 15.1X53 prior to 15.1X53-D30 and DHCPv6 enabled, when a crafted DHCPv6 packet is received from a... • http://www.securityfocus.com/bid/95396 •