Vulnerability-Lookup

CNVD-2017-24396

Vulnerability from cnvd - Published: 2017-09-03

Title

Juniper Junos本地缓冲区溢出漏洞

Description

Juniper Junos是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件系统的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Junos中存在本地缓冲区溢出漏洞。本地攻击者可利用该漏洞在应用程序的上下文中执行任意代码，获取提升的权限或造成拒绝服务。

Severity

高

Patch Name

Juniper Junos本地缓冲区溢出漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://kb.juniper.net/JSA10792

Reference

http://www.securityfocus.com/bid/99556

Impacted products

Name
['Juniper Networks Junos OS 15.1X53-D231', 'Juniper Networks Junos OS 15.1X53-D64', 'Juniper Networks Junos OS 15.1X53-D47', 'Juniper Networks Junos OS 15.1X53-D48', 'Juniper Networks Junos OS 15.1X53-D57', 'Juniper Networks Junos OS 15.1F2-S18', 'Juniper Networks Junos OS 15.1F6-S7', 'Juniper Networks Junos OS 15.1R4-S8', 'Juniper Networks Junos OS 15.1R6-S1', 'Juniper Networks Junos OS 15.1R5-S5', 'Juniper Networks Junos OS 16.1R5', 'Juniper Networks Junos OS 12.3X48-D51', 'Juniper Networks Junos OS 17.2R2', 'Juniper Networks Junos OS 14.1R8-S4', 'Juniper Networks Junos OS 14.1R9', 'Juniper Networks Junos OS 16.1R4-S4', 'Juniper Networks Junos OS 16.1R4-S3', 'Juniper Networks Junos OS 14.1X53-D122', 'Juniper Networks Junos OS 14.1X53-D45', 'Juniper Networks Junos OS 14.2R7-S7', 'Juniper Networks Junos OS 14.2R8', 'Juniper Networks Junos OS 17.1R2', 'Juniper Networks Junos OS 17.2R1-S1，<17.2', 'Juniper Networks Junos OS 17.2X75-D30，<17.2X75', 'Juniper Networks Junos OS 12.3X48，<12.3X48-D55', 'Juniper Networks Junos OS 16.2，16.2R2', 'Juniper Networks Junos OS 17.1，<17.1R1-S3', 'Juniper Networks Junos OS 12.1X46，<12.1X46-D67', 'Juniper Networks Junos OS 16.1，<16.1R3-S4', 'Juniper Networks Junos OS 13.3R10-S2，<13.3', 'Juniper Networks Junos OS 14.1，<14.1R2-S10', 'Juniper Networks Junos OS 14.1X50，<14.1X50-D185', 'Juniper Networks Junos OS 14.1X53，<14.1X53-D50', 'Juniper Networks Junos OS 14.2，<14.2R4-S9', 'Juniper Networks Junos OS 15.1，<15.1R7', 'Juniper Networks Junos OS 15.1X49-D100，<15.1X49', 'Juniper Networks Junos OS 15.1X53，<15.1X53-D70']

Name

['Juniper Networks Junos OS 15.1X53-D231', 'Juniper Networks Junos OS 15.1X53-D64', 'Juniper Networks Junos OS 15.1X53-D47', 'Juniper Networks Junos OS 15.1X53-D48', 'Juniper Networks Junos OS 15.1X53-D57', 'Juniper Networks Junos OS 15.1F2-S18', 'Juniper Networks Junos OS 15.1F6-S7', 'Juniper Networks Junos OS 15.1R4-S8', 'Juniper Networks Junos OS 15.1R6-S1', 'Juniper Networks Junos OS 15.1R5-S5', 'Juniper Networks Junos OS 16.1R5', 'Juniper Networks Junos OS 12.3X48-D51', 'Juniper Networks Junos OS 17.2R2', 'Juniper Networks Junos OS 14.1R8-S4', 'Juniper Networks Junos OS 14.1R9', 'Juniper Networks Junos OS 16.1R4-S4', 'Juniper Networks Junos OS 16.1R4-S3', 'Juniper Networks Junos OS 14.1X53-D122', 'Juniper Networks Junos OS 14.1X53-D45', 'Juniper Networks Junos OS 14.2R7-S7', 'Juniper Networks Junos OS 14.2R8', 'Juniper Networks Junos OS 17.1R2', 'Juniper Networks Junos OS 17.2R1-S1，<17.2', 'Juniper Networks Junos OS 17.2X75-D30，<17.2X75', 'Juniper Networks Junos OS 12.3X48，<12.3X48-D55', 'Juniper Networks Junos OS 16.2，16.2R2', 'Juniper Networks Junos OS 17.1，<17.1R1-S3', 'Juniper Networks Junos OS 12.1X46，<12.1X46-D67', 'Juniper Networks Junos OS 16.1，<16.1R3-S4', 'Juniper Networks Junos OS 13.3R10-S2，<13.3', 'Juniper Networks Junos OS 14.1，<14.1R2-S10', 'Juniper Networks Junos OS 14.1X50，<14.1X50-D185', 'Juniper Networks Junos OS 14.1X53，<14.1X53-D50', 'Juniper Networks Junos OS 14.2，<14.2R4-S9', 'Juniper Networks Junos OS 15.1，<15.1R7', 'Juniper Networks Junos OS 15.1X49-D100，<15.1X49', 'Juniper Networks Junos OS 15.1X53，<15.1X53-D70']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "99556"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-2344"
    }
  },
  "description": "Juniper Junos\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e13\u7528\u4e8e\u8be5\u516c\u53f8\u7684\u786c\u4ef6\u7cfb\u7edf\u7684\u7f51\u7edc\u64cd\u4f5c\u7cfb\u7edf\u3002\u8be5\u64cd\u4f5c\u7cfb\u7edf\u63d0\u4f9b\u4e86\u5b89\u5168\u7f16\u7a0b\u63a5\u53e3\u548cJunos SDK\u3002\r\n\r\nJuniper Junos\u4e2d\u5b58\u5728\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Juniper Networks",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://kb.juniper.net/JSA10792",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-24396",
  "openTime": "2017-09-03",
  "patchDescription": "Juniper Junos\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e13\u7528\u4e8e\u8be5\u516c\u53f8\u7684\u786c\u4ef6\u7cfb\u7edf\u7684\u7f51\u7edc\u64cd\u4f5c\u7cfb\u7edf\u3002\u8be5\u64cd\u4f5c\u7cfb\u7edf\u63d0\u4f9b\u4e86\u5b89\u5168\u7f16\u7a0b\u63a5\u53e3\u548cJunos SDK\u3002\r\n\r\nJuniper Junos\u4e2d\u5b58\u5728\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Juniper Junos\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Juniper Networks Junos OS 15.1X53-D231",
      "Juniper Networks Junos OS 15.1X53-D64",
      "Juniper Networks Junos OS 15.1X53-D47",
      "Juniper Networks Junos OS 15.1X53-D48",
      "Juniper Networks Junos OS 15.1X53-D57",
      "Juniper Networks Junos OS 15.1F2-S18",
      "Juniper Networks Junos OS 15.1F6-S7",
      "Juniper Networks Junos OS 15.1R4-S8",
      "Juniper Networks Junos OS 15.1R6-S1",
      "Juniper Networks Junos OS 15.1R5-S5",
      "Juniper Networks Junos OS 16.1R5",
      "Juniper Networks Junos OS 12.3X48-D51",
      "Juniper Networks Junos OS 17.2R2",
      "Juniper Networks Junos OS 14.1R8-S4",
      "Juniper Networks Junos OS 14.1R9",
      "Juniper Networks Junos OS 16.1R4-S4",
      "Juniper Networks Junos OS 16.1R4-S3",
      "Juniper Networks Junos OS 14.1X53-D122",
      "Juniper Networks Junos OS 14.1X53-D45",
      "Juniper Networks Junos OS 14.2R7-S7",
      "Juniper Networks Junos OS 14.2R8",
      "Juniper Networks Junos OS 17.1R2",
      "Juniper Networks Junos OS 17.2R1-S1\uff0c\u003c17.2",
      "Juniper Networks Junos OS 17.2X75-D30\uff0c\u003c17.2X75",
      "Juniper Networks Junos OS 12.3X48\uff0c\u003c12.3X48-D55",
      "Juniper Networks Junos OS 16.2\uff0c16.2R2",
      "Juniper Networks Junos OS 17.1\uff0c\u003c17.1R1-S3",
      "Juniper Networks Junos OS 12.1X46\uff0c\u003c12.1X46-D67",
      "Juniper Networks Junos OS 16.1\uff0c\u003c16.1R3-S4",
      "Juniper Networks Junos OS 13.3R10-S2\uff0c\u003c13.3",
      "Juniper Networks Junos OS 14.1\uff0c\u003c14.1R2-S10",
      "Juniper Networks Junos OS 14.1X50\uff0c\u003c14.1X50-D185",
      "Juniper Networks Junos OS 14.1X53\uff0c\u003c14.1X53-D50",
      "Juniper Networks Junos OS 14.2\uff0c\u003c14.2R4-S9",
      "Juniper Networks Junos OS 15.1\uff0c\u003c15.1R7",
      "Juniper Networks Junos OS 15.1X49-D100\uff0c\u003c15.1X49",
      "Juniper Networks Junos OS 15.1X53\uff0c\u003c15.1X53-D70"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/99556",
  "serverity": "\u9ad8",
  "submitTime": "2017-07-17",
  "title": "Juniper Junos\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

CVE-2017-2344 (GCVE-0-2017-2344)

Vulnerability from cvelistv5 – Published: 2017-07-14 14:00 – Updated: 2024-09-16 23:31

Title

Junos: Buffer overflow in sockets library

Summary

A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service (kernel panic) or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running on the device itself, and veriexec restricts arbitrary programs from running on Junos OS. There are no known exploit vectors utilizing signed binaries shipped with Junos OS itself. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67; 12.3X48 prior to 12.3X48-D51, 12.3X48-D55; 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; 16.2 prior to 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S1, 17.2R2; 17.2X75 prior to 17.2X75-D30. No other Juniper Networks products or platforms are affected by this issue.

Severity

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Buffer overflow

Assigner

juniper mitre root

References

3 references

URL	Tags
http://www.securitytracker.com/id/1038896	vdb-entryx_refsource_SECTRACK
https://kb.juniper.net/JSA10792	x_refsource_CONFIRM
http://www.securityfocus.com/bid/99556	vdb-entryx_refsource_BID

Impacted products

1 product

Vendor	Product	Version
Juniper Networks	Junos OS	Affected: 12.1X46 prior to 12.1X46-D67 Affected: 12.3X48 prior to 12.3X48-D51, 12.3X48-D55 Affected: 13.3 prior to 13.3R10-S2 Affected: 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9 Affected: 14.1X50 prior to 14.1X50-D185 Affected: 14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50 Affected: 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8 Affected: 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7 Affected: 15.1X49 prior to 15.1X49-D100 Affected: 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70 Affected: 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5 Affected: 16.2 prior to 16.2R2 Affected: 17.1 prior to 17.1R1-S3, 17.1R2 Affected: 17.2 prior to 17.2R1-S1, 17.2R2 Affected: 17.2X75 prior to 17.2X75-D30

Date Public

2017-07-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:48:05.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1038896",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038896"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA10792"
          },
          {
            "name": "99556",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99556"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "status": "affected",
              "version": "12.1X46 prior to 12.1X46-D67"
            },
            {
              "status": "affected",
              "version": "12.3X48 prior to 12.3X48-D51, 12.3X48-D55"
            },
            {
              "status": "affected",
              "version": "13.3 prior to 13.3R10-S2"
            },
            {
              "status": "affected",
              "version": "14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9"
            },
            {
              "status": "affected",
              "version": "14.1X50 prior to 14.1X50-D185"
            },
            {
              "status": "affected",
              "version": "14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50"
            },
            {
              "status": "affected",
              "version": "14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8"
            },
            {
              "status": "affected",
              "version": "15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7"
            },
            {
              "status": "affected",
              "version": "15.1X49 prior to 15.1X49-D100"
            },
            {
              "status": "affected",
              "version": "15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70"
            },
            {
              "status": "affected",
              "version": "16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5"
            },
            {
              "status": "affected",
              "version": "16.2 prior to 16.2R2"
            },
            {
              "status": "affected",
              "version": "17.1 prior to 17.1R1-S3, 17.1R2"
            },
            {
              "status": "affected",
              "version": "17.2 prior to 17.2R1-S1, 17.2R2"
            },
            {
              "status": "affected",
              "version": "17.2X75 prior to 17.2X75-D30"
            }
          ]
        }
      ],
      "datePublic": "2017-07-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service (kernel panic) or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running on the device itself, and veriexec restricts arbitrary programs from running on Junos OS. There are no known exploit vectors utilizing signed binaries shipped with Junos OS itself. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67; 12.3X48 prior to 12.3X48-D51, 12.3X48-D55; 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; 16.2 prior to 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S1, 17.2R2; 17.2X75 prior to 17.2X75-D30. No other Juniper Networks products or platforms are affected by this issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-15T09:57:01.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "name": "1038896",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038896"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA10792"
        },
        {
          "name": "99556",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99556"
        }
      ],
      "title": "Junos: Buffer overflow in sockets library",
      "workarounds": [
        {
          "lang": "en",
          "value": "Limit access to the Junos CLI only from trusted hosts and administrators."
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2017-07-12T09:00",
          "ID": "CVE-2017-2344",
          "STATE": "PUBLIC",
          "TITLE": "Junos: Buffer overflow in sockets library"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "",
                            "version_value": "12.1X46 prior to 12.1X46-D67"
                          },
                          {
                            "platform": "",
                            "version_value": "12.3X48 prior to 12.3X48-D51, 12.3X48-D55"
                          },
                          {
                            "platform": "",
                            "version_value": "13.3 prior to 13.3R10-S2"
                          },
                          {
                            "platform": "",
                            "version_value": "14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9"
                          },
                          {
                            "platform": "",
                            "version_value": "14.1X50 prior to 14.1X50-D185"
                          },
                          {
                            "platform": "",
                            "version_value": "14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50"
                          },
                          {
                            "platform": "",
                            "version_value": "14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8"
                          },
                          {
                            "platform": "",
                            "version_value": "15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7"
                          },
                          {
                            "platform": "",
                            "version_value": "15.1X49 prior to 15.1X49-D100"
                          },
                          {
                            "platform": "",
                            "version_value": "15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70"
                          },
                          {
                            "platform": "",
                            "version_value": "16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5"
                          },
                          {
                            "platform": "",
                            "version_value": "16.2 prior to 16.2R2"
                          },
                          {
                            "platform": "",
                            "version_value": "17.1 prior to 17.1R1-S3, 17.1R2"
                          },
                          {
                            "platform": "",
                            "version_value": "17.2 prior to 17.2R1-S1, 17.2R2"
                          },
                          {
                            "platform": "",
                            "version_value": "17.2X75 prior to 17.2X75-D30"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service (kernel panic) or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running on the device itself, and veriexec restricts arbitrary programs from running on Junos OS. There are no known exploit vectors utilizing signed binaries shipped with Junos OS itself. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D67; 12.3X48 prior to 12.3X48-D51, 12.3X48-D55; 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R2-S10, 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D122, 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R4-S9, 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5; 16.2 prior to 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S1, 17.2R2; 17.2X75 prior to 17.2X75-D30. No other Juniper Networks products or platforms are affected by this issue."
            }
          ]
        },
        "exploit": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1038896",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038896"
            },
            {
              "name": "https://kb.juniper.net/JSA10792",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA10792"
            },
            {
              "name": "99556",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99556"
            }
          ]
        },
        "solution": "The following software releases have been updated to resolve this specific issue: Junos OS 12.1X46-D67, 12.3X48-D51, 12.3X48-D55, 13.3R10-S2, 14.1R2-S10, 14.1R8-S4, 14.1R9, 14.1X53-D122, 14.1X53-D45, 14.1X53-D50, 14.2R7-S7, 14.2R8, 15.1F2-S18, 15.1F6-S7, 15.1R4-S8, 15.1R5-S5, 15.1R6-S1, 15.1R7, 15.1X49-D100, 15.1X53-D231, 15.1X53-D47, 15.1X53-D48, 15.1X53-D57, 15.1X53-D64, 15.1X53-D70, 16.1R3-S4, 16.1R4-S3, 16.1R4-S4, 16.1R5, 16.2R2, 17.1R1-S3, 17.1R2, 17.2R1-S1, 17.2R2, 17.3R1, and all subsequent releases.\n\nThis issue is being tracked as PR 1282562 and is visible on the Customer Support website.",
        "work_around": [
          {
            "lang": "en",
            "value": "Limit access to the Junos CLI only from trusted hosts and administrators."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2017-2344",
    "datePublished": "2017-07-14T14:00:00.000Z",
    "dateReserved": "2016-12-01T00:00:00.000Z",
    "dateUpdated": "2024-09-16T23:31:21.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2017-24396

CVE-2017-2344 (GCVE-0-2017-2344)

Tags

Sightings

Nomenclature

Related by attack behaviour