Juniper Junos CVE-2017-2344 Local Buffer Overflow Vulnerability

Bugtraq ID:	99556
Class:	Boundary Condition Error
CVE:	CVE-2017-2344
Remote:	No
Local:	Yes
Published:	Jul 13 2017 12:00AM
Updated:	Jul 13 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper Junos 16.2R1 Juniper Junos 16.1R4-S1 Juniper Junos 16.1R3-S3 Juniper Junos 16.1R3 Juniper Junos 16.1R2 Juniper Junos 16.1R1 Juniper Junos 15.1X53-D40 Juniper Junos 15.1X53-D35 Juniper Junos 15.1X53-D30 Juniper Junos 15.1X53-D20 Juniper Junos 15.1X49-D70 Juniper Junos 15.1X49-D60 Juniper Junos 15.1X49-D40 Juniper Junos 15.1X49-D30 Juniper Junos 15.1X49-D20 Juniper Junos 15.1X49-D15 Juniper Junos 15.1X49-D10 Juniper Junos 15.1R5-S2 Juniper Junos 15.1R4-S7 Juniper Junos 15.1R4 Juniper Junos 15.1R3 Juniper Junos 15.1R2 Juniper Junos 15.1R1 Juniper Junos 15.1F6-S5 Juniper Junos 15.1F6-S4 Juniper Junos 15.1F2-S16 Juniper Junos 15.1F2-S14 Juniper Junos 14.2R7-S6 Juniper Junos 14.2R6 Juniper Junos 14.2R5 Juniper Junos 14.2R4 Juniper Junos 14.2R3 Juniper Junos 14.2R2 Juniper Junos 14.2R1 Juniper Junos 14.1X53-D35 Juniper Junos 14.1X53-D30 Juniper Junos 14.1X53-D28 Juniper Junos 14.1X53-D26 Juniper Junos 14.1X53-D25 Juniper Junos 14.1X53-D20 Juniper Junos 14.1X53-D18 Juniper Junos 14.1X53-D16 Juniper Junos 14.1X53-D12 Juniper Junos 14.1X53-D10 Juniper Junos 14.1R8-S3 Juniper Junos 14.1R6 Juniper Junos 14.1R5 Juniper Junos 14.1R4 Juniper Junos 14.1R3 Juniper JUNOS 14.1R2 Juniper Junos 14.1R1 Juniper Junos 13.3R10-S1 Juniper Junos 12.3X48-D35 Juniper Junos 12.3X48-D30 Juniper Junos 12.3X48-D25 Juniper Junos 12.3X48-D20 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D10 Juniper Junos 12.1X46-D66 Juniper Junos 12.1X46-D65 Juniper Junos 12.1X46-D60 Juniper Junos 12.1X46-D55 Juniper Junos 12.1X46-D51 Juniper Junos 12.1X46-D50 Juniper Junos 12.1X46-D46 Juniper Junos 12.1X46-D45 Juniper Junos 12.1X46-D40 Juniper Junos 12.1X46-D37 Juniper Junos 12.1X46-D36 Juniper Junos 12.1X46-D35 Juniper Junos 12.1X46-D30 Juniper Junos 12.1X46-D26 Juniper JUNOS 12.1X46-D25 Juniper Junos 12.1X46-D20 Juniper Junos 12.1X46-D15 Juniper Junos 12.1X46-D10
Not Vulnerable:	Juniper Junos 17.3R1 Juniper Junos 17.2R2 Juniper Junos 17.2R1-S1 Juniper Junos 17.1R2 Juniper Junos 17.1R1-S3 Juniper Junos 16.2R2 Juniper Junos 16.1R5 Juniper Junos 16.1R4-S4 Juniper Junos 16.1R4-S3 Juniper Junos 16.1R3-S4 Juniper Junos 15.1X53-D70 Juniper Junos 15.1X53-D64 Juniper Junos 15.1X53-D57 Juniper Junos 15.1X53-D48 Juniper Junos 15.1X53-D47 Juniper Junos 15.1X53-D231 Juniper Junos 15.1X49-D100 Juniper Junos 15.1R7 Juniper Junos 15.1R6-S1 Juniper Junos 15.1R5-S5 Juniper Junos 15.1R4-S8 Juniper Junos 15.1F6-S7 Juniper Junos 15.1F2-S18 Juniper Junos 14.2R8 Juniper Junos 14.2R7-S7 Juniper Junos 14.1X53-D50 Juniper Junos 14.1X53-D45 Juniper Junos 14.1X53-D122 Juniper Junos 14.1R9 Juniper Junos 14.1R8-S4 Juniper Junos 14.1R2-S10 Juniper Junos 13.3R10-S2 Juniper Junos 12.3X48-D55 Juniper Junos 12.3X48-D51 Juniper Junos 12.1X46-D67

Juniper Junos CVE-2017-2344 Local Buffer Overflow Vulnerability

Juniper Junos is prone to a local buffer-overflow vulnerability.

Successful exploits may allow attackers to execute arbitrary code in the context of the application or gain elevated privileges. Failed exploits may result in denial-of-service conditions.

Juniper Junos CVE-2017-2344 Local Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos CVE-2017-2344 Local Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos CVE-2017-2344 Local Buffer Overflow Vulnerability

References:

• Juniper HomePage (Juniper)
  
• Junos Homepage (Juniper Networks)
  
• 2017-07 Security Bulletin: Junos: Buffer overflow in sockets library (CVE-2017-2 (Juniper)