mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 17:51:17 +00:00
342 lines
12 KiB
JSON
342 lines
12 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2017-2348",
|
||
|
|
"sourceIdentifier": "sirt@juniper.net",
|
||
|
|
"published": "2017-07-17T13:18:24.563",
|
||
|
|
"lastModified": "2019-10-09T23:26:46.507",
|
||
|
|
"vulnStatus": "Modified",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S18, 15.1R4 on all products and platforms; 15.1X49 prior to 15.1X49-D80 on SRX; 15.1X53 prior to 15.1X53-D51, 15.1X53-D60 on NFX, QFX, EX."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"lang": "es",
|
||
|
|
"value": "El demonio jdhcpd mejorado de Juniper puede experimentar un uso elevado de la CPU, o bloquearse y reiniciar al recibir un paquete UDP IPv6 no v\u00e1lido. La utilizaci\u00f3n elevada de la CPU y los bloqueos repetidos del demonio jdhcpd pueden resultar en una denegaci\u00f3n de servicio a medida que se interrumpe el servicio DHCP. Ning\u00fan otro producto o plataforma de Juniper Networks est\u00e1 afectada por este problema. Las versiones afectadas son Juniper Networks Junos OS versi\u00f3n 14.1X53 anterior a 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 en QFX, EX, QFabric System; versi\u00f3n 15.1 anterior a 15.1F2-S18, 15.1R4 en todos los productos y plataformas; versi\u00f3n 15.1X49 anterior a 15.1X49-D80 en SRX; versi\u00f3n 15.1X53 anterior a 15.1X53-D51, 15.1X53-D60 en NFX, QFX, EX."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV30": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "3.0",
|
||
|
|
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||
|
|
"attackVector": "NETWORK",
|
||
|
|
"attackComplexity": "LOW",
|
||
|
|
"privilegesRequired": "NONE",
|
||
|
|
"userInteraction": "NONE",
|
||
|
|
"scope": "UNCHANGED",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "NONE",
|
||
|
|
"availabilityImpact": "HIGH",
|
||
|
|
"baseScore": 7.5,
|
||
|
|
"baseSeverity": "HIGH"
|
||
|
|
},
|
||
|
|
"exploitabilityScore": 3.9,
|
||
|
|
"impactScore": 3.6
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"source": "sirt@juniper.net",
|
||
|
|
"type": "Secondary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "3.0",
|
||
|
|
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||
|
|
"attackVector": "NETWORK",
|
||
|
|
"attackComplexity": "LOW",
|
||
|
|
"privilegesRequired": "NONE",
|
||
|
|
"userInteraction": "NONE",
|
||
|
|
"scope": "UNCHANGED",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "NONE",
|
||
|
|
"availabilityImpact": "HIGH",
|
||
|
|
"baseScore": 7.5,
|
||
|
|
"baseSeverity": "HIGH"
|
||
|
|
},
|
||
|
|
"exploitabilityScore": 3.9,
|
||
|
|
"impactScore": 3.6
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
|
||
|
|
"accessVector": "NETWORK",
|
||
|
|
"accessComplexity": "LOW",
|
||
|
|
"authentication": "NONE",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "NONE",
|
||
|
|
"availabilityImpact": "PARTIAL",
|
||
|
|
"baseScore": 5.0
|
||
|
|
},
|
||
|
|
"baseSeverity": "MEDIUM",
|
||
|
|
"exploitabilityScore": 10.0,
|
||
|
|
"impactScore": 2.9,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": false,
|
||
|
|
"userInteractionRequired": false
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-400"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d38:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "321F9E68-E55C-4EF0-B6CC-1D7BDA3966A2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "A545D686-25FD-47CD-838A-CF69FB707253"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "F0146AA9-C513-4871-A62A-52C9F40EB958"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "A18672EF-E33D-4ACE-BB0A-561812F502C7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "18468579-0195-4DDE-BAA5-4BE4068F3A69"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "870244F3-1C05-4F10-A205-5189BB860F46"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "235EE40B-AA15-4F39-8087-A051F4F70995"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "17330544-3AFC-463E-A146-2840A8AE17D2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "884E4A85-ED42-4391-9FDD-9052F957743A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1901864B-688B-4352-A587-4B96B4E49FB1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1B6670FB-9F5A-469B-97F2-074C28572065"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "6E87C765-8D68-404A-AC71-3F22A7260E8C"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1E3B807C-196D-42B8-9042-7582A1366772"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "83FEEE8F-9279-46F2-BAF9-A60537020C61"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EDDE1048-BFEA-4A3E-8270-27C538A68837"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "CC517CD0-FF35-498F-AD33-683B43CA3829"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d47:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "4C2A9C1A-AEE4-4CD6-91D7-D0E9F2717512"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d48:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1749B778-0E36-4539-8668-89F4460F251F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "962CCED8-E321-4878-9BE6-0DC33778559A"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "http://www.securitytracker.com/id/1038899",
|
||
|
|
"source": "sirt@juniper.net",
|
||
|
|
"tags": [
|
||
|
|
"Third Party Advisory",
|
||
|
|
"VDB Entry"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://kb.juniper.net/JSA10800",
|
||
|
|
"source": "sirt@juniper.net",
|
||
|
|
"tags": [
|
||
|
|
"Vendor Advisory"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|