Juniper Junos CVE-2017-2345 Denial of Service Vulnerability

Bugtraq ID:	99567
Class:	Design Error
CVE:	CVE-2017-2345
Remote:	Yes
Local:	No
Published:	Jul 13 2017 12:00AM
Updated:	Jul 13 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper Junos 15.1X53-D70 Juniper Junos 11.4X27.62 (BBE) Juniper JUNOS 11.4X27.44 Juniper JUNOS 11.4X27.43 (BBE) Juniper JUNOS 11.4X27 Juniper JUNOS 11.4R9-S1 Juniper JUNOS 11.4R9 Juniper JUNOS 11.4R8 Juniper Junos 11.4R7.5 Juniper JUNOS 11.4R7-S2 Juniper JUNOS 11.4R7-S1 Juniper JUNOS 11.4R7 Juniper JUNOS 11.4R6.6 Juniper JUNOS 11.4R6-S2 Juniper JUNOS 11.4R5.5 Juniper JUNOS 11.4R5-S2 Juniper Junos 11.4R4.4 Juniper JUNOS 11.4R3.7 Juniper Junos 11.4R2.14 Juniper Junos 11.4R13-S3 Juniper Junos 11.4R13-S2 Juniper Junos 11.4R13-S1 Juniper Junos 11.4R13 Juniper Junos 11.4R12-S4 Juniper JUNOS 11.4R12-S1 Juniper Junos 11.4R12 Juniper Junos 11.4R11.4 Juniper Junos 11.4R11 Juniper Junos 11.4R10.3 Juniper Junos 11.4R10-S1 Juniper Junos 11.4R10 Juniper Junos 11.4R1.6 Juniper JUNOS 11.4R1 Juniper Junos 11.4 R9 Juniper JUNOS 11.4 R8 Juniper Junos 11.4 R7 Juniper JUNOS 11.4 R6 Juniper Junos 11.4 R5 Juniper JUNOS 11.4 R4 Juniper Junos 11.4 R3 Juniper JUNOS 11.4 R2 Juniper JUNOS 11.4 R12 Juniper Junos 11.4 R11 Juniper JUNOS 11.4 R10 Juniper Junos 11.4 R1 Juniper JUNOS 11.4 Juniper Junos 11.3R5.3 Juniper Junos 11.3R4.2 Juniper Junos 11.3 Juniper JUNOS 11.2R2 Juniper Junos 11.2R1.2 Juniper JUNOS 11.2R1 Juniper JUNOS 11.2 Juniper JUNOS 11.1R5 Juniper JUNOS 11.1R4 Juniper JUNOS 10.4S15 Juniper JUNOS 10.4S14 Juniper JUNOS 10.4S13 Juniper JUNOS 10.4S Juniper Junos 10.4R9.2 Juniper JUNOS 10.4R7 Juniper JUNOS 10.4R6 Juniper JUNOS 10.4R16 Juniper JUNOS 10.4R15 Juniper JUNOS 10.4R14 Juniper JUNOS 10.4R13 Juniper JUNOS 10.4R11 Juniper Junos 10.4R10 Juniper Junos 10.4R Juniper JUNOS 10.4 Juniper JUNOS 10.3 Juniper Junos 10.2S10 Juniper JUNOS 10.2R3 Juniper JUNOS 10.2R2 Juniper JUNOS 10.2
Not Vulnerable:	Juniper Junos 17.3R1 Juniper Junos 17.2R2 Juniper Junos 17.2R1-S1 Juniper Junos 17.1R2 Juniper Junos 17.1R1-S3 Juniper Junos 16.2R2 Juniper Junos 16.1R5 Juniper Junos 16.1R4-S3 Juniper Junos 16.1R3-S4 Juniper Junos 15.1X53-D64 Juniper Junos 15.1X53-D57 Juniper Junos 15.1X53-D48 Juniper Junos 15.1X53-D47 Juniper Junos 15.1X53-D231 Juniper Junos 15.1X49-D100 Juniper Junos 15.1R7 Juniper Junos 15.1R6-S1 Juniper Junos 15.1R5-S5 Juniper Junos 15.1R4-S8 Juniper Junos 15.1F6-S7 Juniper Junos 15.1F2-S18 Juniper Junos 14.2R8 Juniper Junos 14.2R7-S7 Juniper Junos 14.1X53-D50 Juniper Junos 14.1X53-D44 Juniper Junos 14.1X53-D122 Juniper Junos 14.1R9 Juniper Junos 14.1R8-S4 Juniper Junos 14.1R2-S10 Juniper Junos 13.3R10-S2 Juniper Junos 12.3X48-D55 Juniper Junos 12.3X48-D51 Juniper Junos 12.1X46-D67

Juniper Junos CVE-2017-2345 Denial of Service Vulnerability

Juniper Junos is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause the snmpd daemon to crash and restart the affected device, denying service to legitimate users. This issue could be exploited to execute arbitrary code; however, this has not been confirmed.

Juniper Junos CVE-2017-2345 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos CVE-2017-2345 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos CVE-2017-2345 Denial of Service Vulnerability

References:

• Juniper HomePage (Juniper)
  
• Junos Homepage (Juniper Networks)
  
• 2017-07 Security Bulletin: Junos: snmpd denial of service upon receipt of crafte (Juniper)