PT-2017-11416 · Juniper Networks · Junos

Published

2017-10-13

·

Updated

2019-10-09

·

CVE-2017-10621

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D71 Junos OS versions 12.3X48 prior to 12.3X48-D50 Junos OS versions 14.1 prior to 14.1R8-S5, 14.1R9 Junos OS versions 14.1X53 prior to 14.1X53-D50 Junos OS versions 14.2 prior to 14.2R7-S9, 14.2R8 Junos OS versions 15.1 prior to 15.1F2-S16, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6 Junos OS versions 15.1X49 prior to 15.1X49-D90 Junos OS versions 15.1X53 prior to 15.1X53-D47 Junos OS versions 16.1 prior to 16.1R4-S1, 16.1R5 Junos OS versions 16.2 prior to 16.2R1-S3, 16.2R2
Description A denial of service issue in the telnetd service allows remote unauthenticated attackers to cause a denial of service.
Recommendations For Junos OS versions 12.1X46 prior to 12.1X46-D71, update to version 12.1X46-D71 or later. For Junos OS versions 12.3X48 prior to 12.3X48-D50, update to version 12.3X48-D50 or later. For Junos OS versions 14.1 prior to 14.1R8-S5, 14.1R9, update to version 14.1R8-S5, 14.1R9 or later. For Junos OS versions 14.1X53 prior to 14.1X53-D50, update to version 14.1X53-D50 or later. For Junos OS versions 14.2 prior to 14.2R7-S9, 14.2R8, update to version 14.2R7-S9, 14.2R8 or later. For Junos OS versions 15.1 prior to 15.1F2-S16, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6, update to version 15.1F2-S16, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6 or later. For Junos OS versions 15.1X49 prior to 15.1X49-D90, update to version 15.1X49-D90 or later. For Junos OS versions 15.1X53 prior to 15.1X53-D47, update to version 15.1X53-D47 or later. For Junos OS versions 16.1 prior to 16.1R4-S1, 16.1R5, update to version 16.1R4-S1, 16.1R5 or later. For Junos OS versions 16.2 prior to 16.2R1-S3, 16.2R2, update to version 16.2R1-S3, 16.2R2 or later.

Fix

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-10621

Affected Products

Junos