PT-2017-15373 · Juniper Networks · Junos

Published 2017-07-14 · Updated 2019-10-09 · CVE-2017-2346

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1X55-D30 through 14.1X55-D35 Junos OS versions 14.2R7 through 14.2R7-S4 Junos OS versions 15.1R5 through 15.1R5-S2 Junos OS versions 16.1R2 through 16.1R3-S2

Description The issue occurs when large fragmented packets are passed through an Application Layer Gateway (ALG) in Junos OS, potentially causing an MS-MPC or MS-MIC Service PIC to crash. Repeated crashes can result in an extended denial of service condition. This issue is only seen if NAT or stateful-firewall rules are configured with ALGs enabled.

Recommendations For Junos OS version 14.1X55-D30, update to version 14.1X55-D35 or later. For Junos OS version 14.2R7, update to version 14.2R7-S4, 14.2R8 or later. For Junos OS version 15.1R5, update to version 15.1R5-S2, 15.1R6 or later. For Junos OS version 16.1R2, update to version 16.1R3-S2, 16.1R4 or later.

Fix

Related Identifiers

CVE-2017-2346

Affected Products

Junos

References · 4

• https://kb.juniper.net/JSA10794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2346 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2346 · Vendor Advisory
• http://securitytracker.com/id/1038895 · Note