PT-2017-11402 · Juniper Networks · Junos

Published 2017-07-14 · Updated 2019-10-09 · CVE-2017-10605

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D67 on vSRX or SRX Series Junos OS versions prior to 12.3X48-D50 on vSRX or SRX Series Junos OS versions prior to 15.1X49-D91, 15.1X49-D100 on vSRX or SRX Series

Description A specially crafted packet might cause the flowd process to crash when the DHCP or DHCP relay is configured on vSRX and SRX Series devices, potentially leading to a denial of service condition. Repeated crashes may cause extended interruptions, and in high-availability configurations, the primary node may fail over to the secondary node. Sustained crafted packets may cause the secondary node to fail or completely halt the flowd process on both nodes.

Recommendations For Junos OS versions prior to 12.1X46-D67 on vSRX or SRX Series, update to version 12.1X46-D67 or later. For Junos OS versions prior to 12.3X48-D50 on vSRX or SRX Series, update to version 12.3X48-D50 or later. For Junos OS versions prior to 15.1X49-D91, 15.1X49-D100 on vSRX or SRX Series, update to version 15.1X49-D91, 15.1X49-D100 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-10605

Affected Products

Junos

References · 4

• https://osv.dev/vulnerability/CVE-2017-10605 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10605 · Security Note
• https://kb.juniper.net/JSA10789 · Vendor Advisory
• http://securitytracker.com/id/1038891 · Note