| Summary | Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS versions are: 15.1 prior to 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D78, 15.1X49-D80; 15.1X53 prior to 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 prior to 16.1R3-S3, 16.1R4; 16.2 prior to 16.2R1-S3, 16.2R2; Releases prior to Junos OS 15.1 are unaffected by this vulnerability. 17.1R1, 17.2R1, and all subsequent releases have a resolution for this vulnerability. |
|---|---|
| Publication Date | April 25, 2017, 12:59 a.m. |
| Registration Date | Jan. 26, 2021, 1:22 p.m. |
| Last Update | Nov. 21, 2024, 12:23 p.m. |
| CVSS3.0 : HIGH | |
| スコア | 7.5 |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 攻撃元区分(AV) | ネットワーク |
| 攻撃条件の複雑さ(AC) | 低 |
| 攻撃に必要な特権レベル(PR) | 不要 |
| 利用者の関与(UI) | 不要 |
| 影響の想定範囲(S) | 変更なし |
| 機密性への影響(C) | なし |
| 完全性への影響(I) | なし |
| 可用性への影響(A) | 高 |
| CVSS2.0 : MEDIUM | |
| Score | 5.0 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| 攻撃元区分(AV) | ネットワーク |
| 攻撃条件の複雑さ(AC) | 低 |
| 攻撃前の認証要否(Au) | 不要 |
| 機密性への影響(C) | なし |
| 完全性への影響(I) | なし |
| 可用性への影響(A) | 低 |
| Get all privileges. | いいえ |
| Get user privileges | いいえ |
| Get other privileges | いいえ |
| User operation required | いいえ |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:* | |||||
| Title | Juniper Networks デバイス製品で稼動する Junos OS における入力確認に関する脆弱性 |
|---|---|
| Summary | Juniper Networks デバイス製品で稼動する Junos OS には、入力確認に関する脆弱性が存在します。 |
| Possible impacts | サービス運用妨害 (DoS) 攻撃が行われる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | April 12, 2017, midnight |
| Registration Date | May 31, 2017, 5:17 p.m. |
| Last Update | May 31, 2017, 5:17 p.m. |
| ジュニパーネットワークス |
| Junos OS |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2017年05月31日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |