5.5

CVE-2017-10613

Junos OS: A kernel hang may occur due to a specific loopback filter action command

A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined action, to hang the kernel. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55; 12.3X48 prior to 12.3X48-D35; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D40; 14.2 prior to 14.2R4-S9, 14.2R7-S8, 14.2R8; 15.1 prior to 15.1F5-S3, 15.1F6, 15.1R4; 15.1X49 prior to 15.1X49-D60; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 12.1x46
Juniper ≫ Junos Version 12.1x46 Update d10
Juniper ≫ Junos Version 12.1x46 Update d15
Juniper ≫ Junos Version 12.1x46 Update d20
Juniper ≫ Junos Version 12.1x46 Update d25
Juniper ≫ Junos Version 12.1x46 Update d30
Juniper ≫ Junos Version 12.1x46 Update d35
Juniper ≫ Junos Version 12.1x46 Update d40
Juniper ≫ Junos Version 12.1x46 Update d45
Juniper ≫ Junos Version 12.1x46 Update d50
Juniper ≫ Junos Version 12.3x48 Update d10
Juniper ≫ Junos Version 12.3x48 Update d15
Juniper ≫ Junos Version 12.3x48 Update d20
Juniper ≫ Junos Version 12.3x48 Update d25
Juniper ≫ Junos Version 12.3x48 Update d30
Juniper ≫ Junos Version 14.1
Juniper ≫ Junos Version 14.1 Update r1
Juniper ≫ Junos Version 14.1 Update r2
Juniper ≫ Junos Version 14.1 Update r3
Juniper ≫ Junos Version 14.1 Update r4
Juniper ≫ Junos Version 14.1 Update r5
Juniper ≫ Junos Version 14.1 Update r6
Juniper ≫ Junos Version 14.1 Update r7
Juniper ≫ Junos Version 14.1 Update r9
Juniper ≫ Junos Version 14.1x53
Juniper ≫ Junos Version 14.1x53 Update d10
Juniper ≫ Junos Version 14.1x53 Update d15
Juniper ≫ Junos Version 14.1x53 Update d16
Juniper ≫ Junos Version 14.1x53 Update d25
Juniper ≫ Junos Version 14.1x53 Update d26
Juniper ≫ Junos Version 14.1x53 Update d27
Juniper ≫ Junos Version 14.1x53 Update d30
Juniper ≫ Junos Version 14.1x53 Update d35
Juniper ≫ Junos Version 14.2
Juniper ≫ Junos Version 14.2 Update r1
Juniper ≫ Junos Version 14.2 Update r2
Juniper ≫ Junos Version 14.2 Update r3
Juniper ≫ Junos Version 14.2 Update r4
Juniper ≫ Junos Version 14.2 Update r7-s8
Juniper ≫ Junos Version 14.2 Update r8
Juniper ≫ Junos Version 15.1
Juniper ≫ Junos Version 15.1 Update f1
Juniper ≫ Junos Version 15.1 Update f2
Juniper ≫ Junos Version 15.1 Update f2-s1
Juniper ≫ Junos Version 15.1 Update f2-s2
Juniper ≫ Junos Version 15.1 Update f2-s3
Juniper ≫ Junos Version 15.1 Update f2-s4
Juniper ≫ Junos Version 15.1 Update f3
Juniper ≫ Junos Version 15.1 Update f4
Juniper ≫ Junos Version 15.1 Update f5
Juniper ≫ Junos Version 15.1 Update f6
Juniper ≫ Junos Version 15.1 Update r4
Juniper ≫ Junos Version 15.1x49
Juniper ≫ Junos Version 15.1x49 Update d10
Juniper ≫ Junos Version 15.1x49 Update d20
Juniper ≫ Junos Version 15.1x49 Update d30
Juniper ≫ Junos Version 15.1x49 Update d35
Juniper ≫ Junos Version 15.1x49 Update d40
Juniper ≫ Junos Version 15.1x49 Update d45
Juniper ≫ Junos Version 15.1x49 Update d50
Juniper ≫ Junos Version 15.1x49 Update d55
Juniper ≫ Junos Version 15.1x53
Juniper ≫ Junos Version 15.1x53 Update d10
Juniper ≫ Junos Version 15.1x53 Update d20
Juniper ≫ Junos Version 15.1x53 Update d21
Juniper ≫ Junos Version 15.1x53 Update d25
Juniper ≫ Junos Version 15.1x53 Update d30
Juniper ≫ Junos Version 15.1x53 Update d32
Juniper ≫ Junos Version 15.1x53 Update d33
Juniper ≫ Junos Version 15.1x53 Update d34
Juniper ≫ Junos Version 16.1
Juniper ≫ Junos Version 16.1 Update r1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.221
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
Juniper 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.