| Summary | A Denial of Service vulnerability in the SIP application layer gateway (ALG) component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC, MS-MPC, MS-DPC or SRX flow daemon (flowd) process. This issue affects Junos OS devices with NAT or stateful firewall configuration in combination with the SIP ALG enabled. SIP ALG is enabled by default on SRX Series devices except for SRX-HE devices. SRX-HE devices have SIP ALG disabled by default. The status of ALGs in SRX device can be obtained by executing the command: show security alg status Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77; 12.3X48 versions prior to 12.3X48-D70; 15.1X49 versions prior to 15.1X49-D140; 15.1 versions prior to 15.1R4-S9, 15.1R7-S1; 15.1F6; 16.1 versions prior to 16.1R4-S9, 16.1R6-S1, 16.1R7; 16.2 versions prior to 16.2R2-S7, 16.2R3; 17.1 versions prior to 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.3 versions prior to 17.3R1-S5, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R2. No other Juniper Networks products or platforms are affected by this issue. |
|---|---|
| Publication Date | Oct. 11, 2018, 3:29 a.m. |
| Registration Date | March 1, 2021, 6:35 p.m. |
| Last Update | Nov. 21, 2024, 12:37 p.m. |
| CVSS3.0 : MEDIUM | |
| スコア | 5.9 |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 攻撃元区分(AV) | ネットワーク |
| 攻撃条件の複雑さ(AC) | 高 |
| 攻撃に必要な特権レベル(PR) | 不要 |
| 利用者の関与(UI) | 不要 |
| 影響の想定範囲(S) | 変更なし |
| 機密性への影響(C) | なし |
| 完全性への影響(I) | なし |
| 可用性への影響(A) | 高 |
| CVSS2.0 : MEDIUM | |
| Score | 4.3 |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
| 攻撃元区分(AV) | ネットワーク |
| 攻撃条件の複雑さ(AC) | 中 |
| 攻撃前の認証要否(Au) | 不要 |
| 機密性への影響(C) | なし |
| 完全性への影響(I) | なし |
| 可用性への影響(A) | 低 |
| Get all privileges. | いいえ |
| Get user privileges | いいえ |
| Get other privileges | いいえ |
| User operation required | いいえ |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:* | |||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:12.3x48:d65:*:*:*:*:*:* | |||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:* | |||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:* | |||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:* | |||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:16.2:r3:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:* | |||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:* | |||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:17.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:* | |||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:17.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:* | |||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:juniper:junos:17.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:* | |||||
| Title | Juniper Networks Junos OS における入力確認に関する脆弱性 |
|---|---|
| Summary | Juniper Networks Junos OS には、入力確認に関する脆弱性が存在します。 |
| Possible impacts | サービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Oct. 10, 2018, midnight |
| Registration Date | Feb. 26, 2019, 5:18 p.m. |
| Last Update | Feb. 26, 2019, 5:18 p.m. |
| ジュニパーネットワークス |
| Junos OS 12.1X46-D77 未満の 12.1X46 |
| Junos OS 12.3X48-D70 未満の 12.3X48 |
| Junos OS 15.1F6 未満の 15.1 |
| Junos OS 15.1R4-S9 未満の 15.1 |
| Junos OS 15.1R7-S1 未満の 15.1 |
| Junos OS 15.1X49-D140 未満の 15.1X49 |
| Junos OS 16.1R4-S9 未満の 16.1 |
| Junos OS 16.1R6-S1 未満の 16.1 |
| Junos OS 16.1R7 未満の 16.1 |
| Junos OS 16.2R2-S7 未満の 16.2 |
| Junos OS 16.2R3 未満の 16.2 |
| Junos OS 17.1R2-S7 未満の 17.1 |
| Junos OS 17.1R3 未満の 17.1 |
| Junos OS 17.2R1-S6 未満の 17.2 |
| Junos OS 17.2R2-S4 未満の 17.2 |
| Junos OS 17.2R3 未満の 17.2 |
| Junos OS 17.3R1-S5 未満の 17.3 |
| Junos OS 17.3R2-S2 未満の 17.3 |
| Junos OS 17.3R3 未満の 17.3 |
| Junos OS 17.4R2 未満の 17.4 |
| Junos OS 12.1X46-D77 未満の 12.1X46 |
| Junos OS 12.3X48-D70 未満の 12.3X48 |
| Junos OS 15.1F6 未満の 15.1 |
| Junos OS 15.1R4-S9 未満の 15.1 |
| Junos OS 15.1R7-S1 未満の 15.1 |
| Junos OS 15.1X49-D140 未満の 15.1X49 |
| Junos OS 16.1R4-S9 未満の 16.1 |
| Junos OS 16.1R6-S1 未満の 16.1 |
| Junos OS 16.1R7 未満の 16.1 |
| Junos OS 16.2R2-S7 未満の 16.2 |
| Junos OS 16.2R3 未満の 16.2 |
| Junos OS 17.1R2-S7 未満の 17.1 |
| Junos OS 17.1R3 未満の 17.1 |
| Junos OS 17.2R1-S6 未満の 17.2 |
| Junos OS 17.2R2-S4 未満の 17.2 |
| Junos OS 17.2R3 未満の 17.2 |
| Junos OS 17.3R1-S5 未満の 17.3 |
| Junos OS 17.3R2-S2 未満の 17.3 |
| Junos OS 17.3R3 未満の 17.3 |
| Junos OS 17.4R2 未満の 17.4 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2019年02月26日] 掲載 |
Feb. 26, 2019, 5:18 p.m. |