PT-2017-11404 · Juniper Networks · Junos

Publicado 2017-10-13 · Atualizado 2019-10-09 · CVE-2017-10607

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 16.1R1 through 16.1R1-S3

Description The issue is caused by the receipt of a crafted BGP Protocol Data Unit (PDU) sent directly to the router, which can cause the RPD routing process to crash and restart. This can result in an extended denial of service condition due to repeated crashes of the rpd daemon. The issue can only be triggered by a packet sent directly to the IP address of the router.

Recommendations For Juniper Networks Junos OS versions 16.1R1 through 16.1R1-S3, update to Junos OS 16.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-10607

Produtos afetados

Junos

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-10607 · Aviso do Fabricante
• https://kb.juniper.net/JSA10810 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10607 · Nota de Segurança