Lucene search

[email protected]CVE-2017-2346

HistoryJul 17, 2017 - 1:18 p.m.

CVE-2017-2346

2017-07-1713:18:24

[email protected]

web.nvd.nist.gov

cve-2017-2346

juniper networks

junos os

denial of service

alg

nat

stateful-firewall

pr 1182910

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

JSON

An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG). Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with ALGs enabled. This issue was caused by the code change for PR 1182910 in Junos OS 14.1X55-D30, 14.1X55-D35, 14.2R7, 15.1R5, and 16.1R2. No other versions of Junos OS and no other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS on MX platforms running: 14.1X55 from 14.1X55-D30 to releases prior to 14.1X55-D35; 14.2R from 14.2R7 to releases prior to 14.2R7-S4, 14.2R8; 15.1R from 15.1R5 to releases prior to 15.1R5-S2, 15.1R6; 16.1R from 16.1R2 to releases prior to 16.1R3-S2, 16.1R4.

Affected configurations

NVD

Node

juniperjunosMatch14.1x55

juniperjunosMatch14.1x55d30

juniperjunosMatch14.2r

juniperjunosMatch14.2r1

juniperjunosMatch14.2r2

juniperjunosMatch14.2r3

juniperjunosMatch14.2r4

juniperjunosMatch14.2r5

juniperjunosMatch14.2r6

juniperjunosMatch14.2r7

juniperjunosMatch15.1r

juniperjunosMatch15.1r1

juniperjunosMatch15.1r2

juniperjunosMatch15.1r3

juniperjunosMatch15.1r4

juniperjunosMatch15.1r5

juniperjunosMatch15.1r6

juniperjunosMatch16.1r

juniperjunosMatch16.1r1

juniperjunosMatch16.1r2

juniperjunosMatch16.1r3

juniperjunosMatch16.1r4

AND

junipermxMatch-

CPENameOperatorVersion
juniper:junosjuniper junoseq14.1x55
juniper:junosjuniper junoseq14.2
juniper:junosjuniper junoseq15.1
juniper:junosjuniper junoseq16.1

CPE	Name	Operator	Version
juniper:junos	juniper junos	eq	14.1x55
juniper:junos	juniper junos	eq	14.2
juniper:junos	juniper junos	eq	15.1
juniper:junos	juniper junos	eq	16.1

CNA Affected

[
  {
    "platforms": [
      "MX Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "status": "affected",
        "version": "14.1X55 from 14.1X55-D30 prior to 14.1X55-D35"
      },
      {
        "status": "affected",
        "version": "14.2R from 14.2R7 prior to 14.2R7-S4, 14.2R8"
      },
      {
        "status": "affected",
        "version": "15.1R from 15.1R5 prior to 15.1R5-S2, 15.1R6"
      },
      {
        "status": "affected",
        "version": "16.1R from 16.1R2 prior to 16.1R3-S2, 16.1R4"
      }
    ]
  }
]

References

www.securitytracker.com/id/1038895

kb.juniper.net/JSA10794

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

JSON

Related for CVE-2017-2346

openvas1 nessus1 prion1 nvd1 cvelist1