PT-2017-11414 · Juniper Networks · Srx+1

Publicado 2017-10-13 · Atualizado 2019-10-09 · CVE-2017-10619

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D45 Junos OS versions prior to 15.1X49-D80

Description The issue occurs when Express Path is configured on certain Juniper Networks SRX devices in high availability cluster configuration mode, causing the flowd process to crash due to certain multicast packets. This can lead to a denial of service condition, interrupting traffic flow and triggering fail-over to the secondary node. The service is not enabled by default and is only supported on high-end SRX platforms.

Recommendations For Junos OS versions prior to 12.3X48-D45, update to 12.3X48-D45 or later. For Junos OS versions prior to 15.1X49-D80, update to 15.1X49-D80 or later.

Correção

Identificadores relacionados

CVE-2017-10619

Produtos afetados

Junos

Srx

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-10619 · Aviso do Fabricante
• https://kb.juniper.net/JSA10821 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10619 · Nota de Segurança