PT-2017-11406 · Juniper Networks · Junos

Publicado 2017-10-13 · Atualizado 2019-10-09 · CVE-2017-10610

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D71 Junos OS versions prior to 12.3X48-D55 Junos OS versions prior to 15.1X49-D100 on SRX Series

Description A crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash, leading to an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured.

Recommendations For Junos OS versions prior to 12.1X46-D71, update to 12.1X46-D71 or later. For Junos OS versions prior to 12.3X48-D55, update to 12.3X48-D55 or later. For Junos OS versions prior to 15.1X49-D100 on SRX Series, update to 15.1X49-D100 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-10610

Produtos afetados

Junos

Referências · 4

• https://kb.juniper.net/JSA10813 · Aviso do Fabricante
• https://juniper.net/documentation/en_US/junos/topics/task/configuration/nat-stateful-nat64-configuring.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10610 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-10610 · Aviso do Fabricante