CVE-2017-2328

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller...

CVE-2017-2333

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain...

CVE-2017-2320

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the...

CVE-2017-2323

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service...

CVE-2017-2327

CVE-2017-2327 affects the Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. An authenticated attacker can cause a denial of service by consuming large amounts of system resources, leading to cascading DoS. The available documents identify the affected product and vu...

CVE-2017-2318

The connected documents confirm CVE-2017-2318 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An authenticated malicious user may read log files, compromising integrity, and may gain elevation of privileges. This is tied to the NorthStar Controller...

CVE-2017-2320

The CVE affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated, unprivileged, network-based attacker can cause various denials of service and may modify any component of the NorthStar system, including managed systems, or cause full DoS...

CVE-2017-2328

The vulnerability CVE-2017-2328 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An information disclosure flaw allows an unprivileged, authenticated user to read unprivileged information stored in the NorthStar controller, enabling elevation of per...

CVE-2017-2326

The vulnerability CVE-2017-2326 affects Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. An information-disclosure flaw could allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to the attac...

CVE-2017-2334

The CVE-2017-2334 entry affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An attacker on the network may leverage an information-disclosure flaw to perform a man-in-the-middle attack, stealing credentials from encrypted paths and potentially gaining ...

CVE-2017-2317

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure,...

CVE-2017-2325

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service...

CVE-2017-2319

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authent...

CVE-2017-2319

Affected product/component: Juniper Networks NorthStar Controller Application (NorthStar Controller). Vulnerability: Authentication bypass that can allow a remote attacker to compromise confidentiality and integrity without authentication, potentially affecting managed systems and making services...

CVE-2017-2316

The CVE-2017-2316 entry concerns Juniper Networks NorthStar Controller Application (pre-2.1.0 Service Pack 1). The vulnerability is a buffer overflow that can be triggered by an authenticated attacker, potentially causing a denial of service. Affected component: NorthStar Controller Application; ...

CVE-2017-2325

Summary: CVE-2017-2325 refers to a buffer overflow in Juniper Networks NorthStar Controller Application before version 2.1.0 Service Pack 1, which could be triggered by an authenticated user to cause a denial of service. The connected CNVD/CNVD-2017-07222 and related records corroborate the affec...

CVE-2017-2324

CVE-2017-2324 affects Juniper Networks NorthStar Controller Application (before 2.1.0 Service Pack 1). The vulnerability is a command injection in the NorthStar Controller Application that an attacker could exploit over the network to cause a denial of service. The public documents identify the a...

CVE-2017-2330

CVE-2017-2330 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated local attacker can trigger a fork bomb (rabbit virus) that spawns processes until system resources are exhausted, causing DoS and potential persistent denial of servic...

CVE-2017-2332

CVE-2017-2332 involves an insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application, prior to version 2.1.0 Service Pack 1. An unauthenticated, network-based attacker could perform privileged actions to gain complete control of the environment. Affected produc...

CVE-2017-2329

The Juniper Networks NorthStar Controller Application is affected prior to 2.1.0 Service Pack 1. An insufficient authentication flaw could allow an unprivileged, authenticated user to execute certain unprivileged system files, enabling widespread denial of service. Root cause: insufficient authen...