PT-2015-6869 · Juniper Networks · Junos

Publicado 2015-07-16 · Atualizado 2015-07-21 · CVE-2015-5363

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Junos versions 12.1X44 before 12.1X44-D50 Junos versions 12.1X46 before 12.1X46-D35 Junos versions 12.1X47 before 12.1X47-D25 Junos versions 12.3X48 before 12.3X48-D15

Description The issue allows remote DNS servers to cause a denial of service, resulting in a crash, via a crafted DNS response. This is related to the SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways.

Recommendations For Junos versions 12.1X44 before 12.1X44-D50, update to version 12.1X44-D50 or later. For Junos versions 12.1X46 before 12.1X46-D35, update to version 12.1X46-D35 or later. For Junos versions 12.1X47 before 12.1X47-D25, update to version 12.1X47-D25 or later. For Junos versions 12.3X48 before 12.3X48-D15, update to version 12.3X48-D15 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2015-5363

Produtos afetados

Junos

Referências · 3

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10692 · Aviso do Fabricante
• http://securitytracker.com/id/1032848 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5363 · Nota de Segurança