PT-2017-11410 · Juniper Networks · Junos

Published 2017-10-13 · Updated 2019-10-09 · CVE-2017-10614

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D45 Junos OS versions 12.3X48 prior to 12.3X48-D30 Junos OS versions 14.1 prior to 14.1R4-S9, 14.1R8 Junos OS versions 14.2 prior to 14.2R6 Junos OS versions 15.1 prior to 15.1F5, 15.1R3 Junos OS versions 15.1X49 prior to 15.1X49-D40 Junos OS versions 15.1X53 prior to 15.1X53-D232, 15.1X53-D47

Description A vulnerability in the telnetd service allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing.

Recommendations For Junos OS versions 12.1X46 prior to 12.1X46-D45, update to version 12.1X46-D45 or later. For Junos OS versions 12.3X48 prior to 12.3X48-D30, update to version 12.3X48-D30 or later. For Junos OS versions 14.1 prior to 14.1R4-S9, 14.1R8, update to version 14.1R4-S9 or 14.1R8 or later. For Junos OS versions 14.2 prior to 14.2R6, update to version 14.2R6 or later. For Junos OS versions 15.1 prior to 15.1F5, 15.1R3, update to version 15.1F5 or 15.1R3 or later. For Junos OS versions 15.1X49 prior to 15.1X49-D40, update to version 15.1X49-D40 or later. For Junos OS versions 15.1X53 prior to 15.1X53-D232, 15.1X53-D47, update to version 15.1X53-D232 or 15.1X53-D47 or later.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-10614

Affected Products

Junos

References · 3

• https://osv.dev/vulnerability/CVE-2017-10614 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10614 · Security Note
• https://kb.juniper.net/JSA10817 · Vendor Advisory