CVE-2017-2333

Juniper Networks NorthStar Controller Application, before version 2.1.0 Service Pack 1, is vulnerable to a persistent denial of service. A network-based, authenticated attacker can exhaust resources by visiting certain URLs, leading to partial availability impact. The description and connected so...

CVE-2017-2328

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller...

CVE-2017-2328

The vulnerability CVE-2017-2328 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An information disclosure flaw allows an unprivileged, authenticated user to read unprivileged information stored in the NorthStar controller, enabling elevation of per...

CVE-2017-2318

The connected documents confirm CVE-2017-2318 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An authenticated malicious user may read log files, compromising integrity, and may gain elevation of privileges. This is tied to the NorthStar Controller...

CVE-2017-2332

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment...

CVE-2017-2326

The vulnerability CVE-2017-2326 affects Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. An information-disclosure flaw could allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to the attac...

CVE-2017-2320

The CVE affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated, unprivileged, network-based attacker can cause various denials of service and may modify any component of the NorthStar system, including managed systems, or cause full DoS...

CVE-2017-2321

CVE-2017-2321 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated, unprivileged, network-based attacker could cause partial to full denial of service, modify system states and files, and potentially disclose sensitive information. Th...

CVE-2017-2329

The Juniper Networks NorthStar Controller Application is affected prior to 2.1.0 Service Pack 1. An insufficient authentication flaw could allow an unprivileged, authenticated user to execute certain unprivileged system files, enabling widespread denial of service. Root cause: insufficient authen...

CVE-2017-2315

The CVE-2017-2315 issue affects Juniper Networks EX Series switches running various Junos OS versions, where IPv6 Neighbor Discovery processing can be exploited by a specially crafted IPv6 NDP packet to trigger a slow memory leak and eventual resource exhaustion, leading to DoS. Affected Junos OS...

CVE-2017-2330

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves,...

CVE-2017-2334

The CVE-2017-2334 entry affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An attacker on the network may leverage an information-disclosure flaw to perform a man-in-the-middle attack, stealing credentials from encrypted paths and potentially gaining ...

CVE-2017-2317

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure,...

CVE-2017-2312

CVE-2017-2312 affects Juniper Networks Junos OS devices with LDP enabled (IPv4 or IPv6) where a targeted LDP packet to the Routing Engine consumes incremental memory in the rpd daemon, leading to memory exhaustion and a crash/restart of rpd. Affected Junos versions include 13.3 before 13.3R10; 14...

CVE-2017-2316

The CVE-2017-2316 entry concerns Juniper Networks NorthStar Controller Application (pre-2.1.0 Service Pack 1). The vulnerability is a buffer overflow that can be triggered by an authenticated attacker, potentially causing a denial of service. Affected component: NorthStar Controller Application; ...

CVE-2017-2323

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service...

CVE-2017-2315

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery ND packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious...

CVE-2017-2329

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services...

CVE-2017-2323

CVE-2017-2323 : Affects Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. Vulnerability is a denial of service where a malicious actor sending crafted packets to the device can cause a persistent denial of service to the path computation server service. Documentatio...

CVE-2017-2320

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the...