Juniper Networks JUNOS Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
BID:37670
Info
Juniper Networks JUNOS Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
| Bugtraq ID: | 37670 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 07 2010 12:00AM |
| Updated: | Jan 11 2010 12:11PM |
| Credit: | Unknown. |
| Vulnerable: |
Juniper junose 7.1.1 Juniper junose 7.1 p0-1 Juniper junose 7.0.2 Juniper junose 7.0.1 p0-7 Juniper junose 6.1.3 p0-1 Juniper junose 6.0.4 Juniper junose 6.0.3 p0-6 Juniper junose 5.3.5 p0-2 Juniper junose 0 Juniper JUNOS 8.0 Juniper JUNOS 6.4 Juniper JUNOS 6.3 Juniper JUNOS 6.2 Juniper JUNOS 6.1 Juniper JUNOS 5.7 Juniper JUNOS 5.6 Juniper JUNOS 5.5 Juniper JUNOS 5.4 Juniper JUNOS 5.3 Juniper JUNOS 5.2 Juniper JUNOS 5.1 Juniper JUNOS 5.0 Juniper JUNOS 9.0 R1.1 Juniper JUNOS 8.5.R1 Juniper JUNOS 8.5 R1.14 Juniper JUNOS 8.4 Juniper JUNOS 7.3 |
| Not Vulnerable: | |
Discussion
Juniper Networks JUNOS Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
JUNOS is prone to a remote denial-of-service vulnerability that arises when the application handles specially crafted TCP packets.
JUNOS is also prone to six other unspecified security vulnerabilities. These issues may include privilege-escalation or denial-of-service issues.
JUNOS 7.x, 8.x, and 9.x are affected. JUNOS 10.x is not believed to be affected.
JUNOS is prone to a remote denial-of-service vulnerability that arises when the application handles specially crafted TCP packets.
JUNOS is also prone to six other unspecified security vulnerabilities. These issues may include privilege-escalation or denial-of-service issues.
JUNOS 7.x, 8.x, and 9.x are affected. JUNOS 10.x is not believed to be affected.
Exploit / POC
Juniper Networks JUNOS Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
Attackers can exploit the denial-of-service issue with readily available tools.
The following exploit code is available:
Attackers can exploit the denial-of-service issue with readily available tools.
The following exploit code is available:
Solution / Fix
Juniper Networks JUNOS Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
Solution:
The vendor has reportedly corrected the issues in JUNOS 10.x, but we have not confirmed this. Please contact the vendor for details.
Solution:
The vendor has reportedly corrected the issues in JUNOS 10.x, but we have not confirmed this. Please contact the vendor for details.
References
Juniper Networks JUNOS Malformed TCP Packet Denial of Service and Unspecified Vulnerabilities
References:
References:
- Juniper JUNOS Remote Kernel Crash Flaw! ([Positive Technologies] Research Lab)
- Juniper Networks Homepage (Juniper Networks)
- JUNOS (Juniper) Flaw Exposes Core Routers to Kernel Crash (Praetorian Prefect)