7.5

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS versions are: 15.1 prior to 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D78, 15.1X49-D80; 15.1X53 prior to 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 prior to 16.1R3-S3, 16.1R4; 16.2 prior to 16.2R1-S3, 16.2R2; Releases prior to Junos OS 15.1 are unaffected by this vulnerability. 17.1R1, 17.2R1, and all subsequent releases have a resolution for this vulnerability.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version15.1 Updatef1
Juniper ≫ Junos Version15.1 Updatef2
Juniper ≫ Junos Version15.1 Updatef5
Juniper ≫ Junos Version15.1 Updatef6
Juniper ≫ Junos Version15.1 Updatef7
Juniper ≫ Junos Version15.1 Updater4
Juniper ≫ Junos Version15.1 Updater5
Juniper ≫ Junos Version15.1 Updater6
Juniper ≫ Junos Version15.1x49 Updated10
Juniper ≫ Junos Version15.1x49 Updated20
Juniper ≫ Junos Version15.1x49 Updated30
Juniper ≫ Junos Version15.1x49 Updated35
Juniper ≫ Junos Version15.1x49 Updated40
Juniper ≫ Junos Version15.1x49 Updated45
Juniper ≫ Junos Version15.1x49 Updated50
Juniper ≫ Junos Version15.1x49 Updated60
Juniper ≫ Junos Version15.1x49 Updated65
Juniper ≫ Junos Version15.1x49 Updated70
Juniper ≫ Junos Version15.1x49 Updated75
Juniper ≫ Junos Version15.1x49 Updated80
Juniper ≫ Junos Version15.1x53 Updated10
Juniper ≫ Junos Version15.1x53 Updated20
Juniper ≫ Junos Version15.1x53 Updated21
Juniper ≫ Junos Version15.1x53 Updated210
Juniper ≫ Junos Version15.1x53 Updated30
Juniper ≫ Junos Version15.1x53 Updated32
Juniper ≫ Junos Version15.1x53 Updated33
Juniper ≫ Junos Version15.1x53 Updated34
Juniper ≫ Junos Version15.1x53 Updated60
Juniper ≫ Junos Version15.1x53 Updated61
Juniper ≫ Junos Version15.1x53 Updated62
Juniper ≫ Junos Version15.1x53 Updated63
Juniper ≫ Junos Version15.1x53 Updated70
Juniper ≫ Junos Version16.1 Updater1
Juniper ≫ Junos Version16.1 Updater2
Juniper ≫ Junos Version16.1 Updater3
Juniper ≫ Junos Version16.1 Updater4
Juniper ≫ Junos Version16.2 Updater1
Juniper ≫ Junos Version16.2 Updater2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.636
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/97606
Third Party Advisory
VDB Entry