CVE-2017-2317

Juniper Networks NorthStar Controller Application before version 2.1.0 Service Pack 1 is vulnerable to a denial-of-service attack from an unauthenticated, network-based attacker. The issue can cause DoS of underlying database tables and may lead to information disclosure, modification of system s...

CVE-2017-2329

The Juniper Networks NorthStar Controller Application is affected prior to 2.1.0 Service Pack 1. An insufficient authentication flaw could allow an unprivileged, authenticated user to execute certain unprivileged system files, enabling widespread denial of service. Root cause: insufficient authen...

CVE-2017-2330

CVE-2017-2330 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An unauthenticated local attacker can trigger a fork bomb (rabbit virus) that spawns processes until system resources are exhausted, causing DoS and potential persistent denial of servic...

CVE-2017-2332

CVE-2017-2332 involves an insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application, prior to version 2.1.0 Service Pack 1. An unauthenticated, network-based attacker could perform privileged actions to gain complete control of the environment. Affected produc...

CVE-2017-2312

CVE-2017-2312 affects Juniper Networks Junos OS devices with LDP enabled (IPv4 or IPv6) where a targeted LDP packet to the Routing Engine consumes incremental memory in the rpd daemon, leading to memory exhaustion and a crash/restart of rpd. Affected Junos versions include 13.3 before 13.3R10; 14...

CVE-2017-2323

CVE-2017-2323 : Affects Juniper Networks NorthStar Controller Application prior to 2.1.0 Service Pack 1. Vulnerability is a denial of service where a malicious actor sending crafted packets to the device can cause a persistent denial of service to the path computation server service. Documentatio...

CVE-2017-2324

CVE-2017-2324 affects Juniper Networks NorthStar Controller Application (before 2.1.0 Service Pack 1). The vulnerability is a command injection in the NorthStar Controller Application that an attacker could exploit over the network to cause a denial of service. The public documents identify the a...

CVE-2017-2329

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services...

CVE-2017-2332

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment...

CVE-2017-2331

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and...

CVE-2017-2315

The CVE-2017-2315 issue affects Juniper Networks EX Series switches running various Junos OS versions, where IPv6 Neighbor Discovery processing can be exploited by a specially crafted IPv6 NDP packet to trigger a slow memory leak and eventual resource exhaustion, leading to DoS. Affected Junos OS...

CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2331

CVE-2017-2331 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. The connected documents describe a firewall bypass vulnerability that could allow a network-based attacker to bypass firewall policies, leading to authentication bypass, information disc...

CVE-2017-2340

CVE-2017-2340 affects Juniper Networks Junos OS on M/MX platforms with Enhanced Subscriber Management for DHCPv6 enabled. A vulnerability in IPv6 Neighbor Discovery processing can cause the Packet Forwarding Engine (PFE) to hang or crash. Affected releases include Junos OS 15.1R3–15.1R4 and 16.1 ...

CVE-2017-2330

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves,...

CVE-2017-2324

A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service condition...

CVE-2017-2318

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges...

CVE-2017-2333

Juniper Networks NorthStar Controller Application, before version 2.1.0 Service Pack 1, is vulnerable to a persistent denial of service. A network-based, authenticated attacker can exhaust resources by visiting certain URLs, leading to partial availability impact. The description and connected so...

Juniper Junos Routing Process Daemon BGP UPDATE DoS (JSA10778)

According to its self-reported version and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd when handling a specially crafted BGP UPDATE. An unauthenticated, remote attacker can exploit this to repeatedly crash and...

Juniper Junos Routing Protocol Daemon LDP Packet DoS (JSA10777)

According to its self-reported version and configuration, the remote Juniper Junos device is affected by a memory leak issue in the routing protocol daemon rpd when handling a specific LDP packet, which over time will consume memory that cannot be freed without restarting the rpd process. An...