PT-2015-6869 · Juniper Networks · Junos

Published 2015-07-16 · Updated 2015-07-21 · CVE-2015-5363

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Junos versions 12.1X44 before 12.1X44-D50 Junos versions 12.1X46 before 12.1X46-D35 Junos versions 12.1X47 before 12.1X47-D25 Junos versions 12.3X48 before 12.3X48-D15

Description The issue allows remote DNS servers to cause a denial of service, resulting in a crash, via a crafted DNS response. This is related to the SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways.

Recommendations For Junos versions 12.1X44 before 12.1X44-D50, update to version 12.1X44-D50 or later. For Junos versions 12.1X46 before 12.1X46-D35, update to version 12.1X46-D35 or later. For Junos versions 12.1X47 before 12.1X47-D25, update to version 12.1X47-D25 or later. For Junos versions 12.3X48 before 12.3X48-D15, update to version 12.3X48-D15 or later.

Fix

DoS

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2015-5363

Affected Products

Junos

References · 3

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10692 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5363 · Security Note
• http://securitytracker.com/id/1032848 · Note