CVE-2017-2321

CVE-2017-2321 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated, unprivileged, network-based attacker could cause partial to full denial of service, modify system states and files, and potentially disclose sensitive information. Th...

CVE-2017-2321

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potentia...

CVE-2017-2328

The vulnerability CVE-2017-2328 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An information disclosure flaw allows an unprivileged, authenticated user to read unprivileged information stored in the NorthStar controller, enabling elevation of per...

CVE-2017-2318

The connected documents confirm CVE-2017-2318 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An authenticated malicious user may read log files, compromising integrity, and may gain elevation of privileges. This is tied to the NorthStar Controller...

CVE-2017-2319

Affected product/component: Juniper Networks NorthStar Controller Application (NorthStar Controller). Vulnerability: Authentication bypass that can allow a remote attacker to compromise confidentiality and integrity without authentication, potentially affecting managed systems and making services...

CVE-2017-2323

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service...

CVE-2017-2320

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the...

CVE-2017-2327

CVE-2017-2327 affects the Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. An authenticated attacker can cause a denial of service by consuming large amounts of system resources, leading to cascading DoS. The available documents identify the affected product and vu...

CVE-2017-2324

CVE-2017-2324 affects Juniper Networks NorthStar Controller Application (before 2.1.0 Service Pack 1). The vulnerability is a command injection in the NorthStar Controller Application that an attacker could exploit over the network to cause a denial of service. The public documents identify the a...

CVE-2017-2325

Summary: CVE-2017-2325 refers to a buffer overflow in Juniper Networks NorthStar Controller Application before version 2.1.0 Service Pack 1, which could be triggered by an authenticated user to cause a denial of service. The connected CNVD/CNVD-2017-07222 and related records corroborate the affec...

CVE-2017-2332

CVE-2017-2332 involves an insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application, prior to version 2.1.0 Service Pack 1. An unauthenticated, network-based attacker could perform privileged actions to gain complete control of the environment. Affected produc...

CVE-2017-2329

The Juniper Networks NorthStar Controller Application is affected prior to 2.1.0 Service Pack 1. An insufficient authentication flaw could allow an unprivileged, authenticated user to execute certain unprivileged system files, enabling widespread denial of service. Root cause: insufficient authen...

CVE-2017-2323

CVE-2017-2323 : Affects Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. Vulnerability is a denial of service where a malicious actor sending crafted packets to the device can cause a persistent denial of service to the path computation server service. Documentatio...

CVE-2017-2326

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

CVE-2017-2312

CVE-2017-2312 affects Juniper Networks Junos OS devices with LDP enabled (IPv4 or IPv6) where a targeted LDP packet to the Routing Engine consumes incremental memory in the rpd daemon, leading to memory exhaustion and a crash/restart of rpd. Affected Junos versions include 13.3 before 13.3R10; 14...

CVE-2017-2316

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service...

CVE-2017-2317

Juniper Networks NorthStar Controller Application before version 2.1.0 Service Pack 1 is vulnerable to a denial-of-service attack from an unauthenticated, network-based attacker. The issue can cause DoS of underlying database tables and may lead to information disclosure, modification of system s...

CVE-2017-2333

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain...

CVE-2017-2330

CVE-2017-2330 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated local attacker can trigger a fork bomb (rabbit virus) that spawns processes until system resources are exhausted, causing DoS and potential persistent denial of servic...

CVE-2017-2334

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted,...