PT-2017-1972 · Juniper Networks · Junos

Published 2017-04-24 · Updated 2019-10-03 · CVE-2017-2315

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.3 prior to 12.3R12-S4, 12.3R13 Junos OS versions 13.3 prior to 13.3R10 Junos OS versions 14.1 prior to 14.1R8-S3, 14.1R9 Junos OS versions 14.1X53 prior to 14.1X53-D12, 14.1X53-D40 Junos OS versions 14.1X55 prior to 14.1X55-D35 Junos OS versions 14.2 prior to 14.2R6-S4, 14.2R7-S6, 14.2R8 Junos OS versions 15.1 prior to 15.1R5 Junos OS versions 16.1 before 16.1R3 Junos OS versions 16.2 before 16.2R1-S3, 16.2R2

Description A vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery (ND) packet to cause a slow memory leak. A malicious network-based packet flood of these crafted IPv6 NDP packets may eventually lead to resource exhaustion and a denial of service.

Recommendations For Junos OS versions 12.3 prior to 12.3R12-S4, 12.3R13, update to version 12.3R12-S4 or later. For Junos OS versions 13.3 prior to 13.3R10, update to version 13.3R10 or later. For Junos OS versions 14.1 prior to 14.1R8-S3, 14.1R9, update to version 14.1R8-S3 or later. For Junos OS versions 14.1X53 prior to 14.1X53-D12, 14.1X53-D40, update to version 14.1X53-D12 or later. For Junos OS versions 14.1X55 prior to 14.1X55-D35, update to version 14.1X55-D35 or later. For Junos OS versions 14.2 prior to 14.2R6-S4, 14.2R7-S6, 14.2R8, update to version 14.2R6-S4 or later. For Junos OS versions 15.1 prior to 15.1R5, update to version 15.1R5 or later. For Junos OS versions 16.1 before 16.1R3, update to version 16.1R3 or later. For Junos OS versions 16.2 before 16.2R1-S3, 16.2R2, update to version 16.2R1-S3 or later. As a temporary workaround, consider restricting the receipt of IPv6 NDP packets to minimize the risk of exploitation.

Fix

DoS

Resource Exhaustion

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-400

CWE-772

Related Identifiers

BDU:2017-01132

CVE-2017-2315

Affected Products

Junos

References · 6

• https://bdu.fstec.ru/vul/2017-01132 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2315 · Vendor Advisory
• https://kb.juniper.net/JSA10781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2315 · Security Note
• http://securityfocus.com/bid/97615 · Note
• http://securitytracker.com/id/1038253 · Note