QID 43827

Juniper Junos is the network operating system used in Juniper Networks hardware systems.

A buffer overflow vulnerability exists in the overlayd service of Juniper Networks Junos OS.
The overlayd daemon handles Overlay OAM packets, such as ping and traceroute, sent to the overlay. The service runs as root by default and listens for UDP connections on port 4789. This issue results from improper buffer size validation, which can lead to a buffer overflow.

Affected releases are Junos OS:
15.1X49 versions prior to 15.1X49-D240 on SRX Series;
15.1 versions prior to 15.1R7-S9;
17.3 versions prior to 17.3R3-S11;
17.4 versions prior to 17.4R2-S13, 17.4R3-S4;
18.1 versions prior to 18.1R3-S12;
18.2 versions prior to 18.2R2-S8, 18.2R3-S7;
18.3 versions prior to 18.3R3-S4;
18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7;
19.1 versions prior to 19.1R2-S2, 19.1R3-S4;
19.2 versions prior to 19.2R1-S6, 19.2R3-S2;
19.3 versions prior to 19.3R3-S1;
19.4 versions prior to 19.4R2-S4, 19.4R3-S1;
20.1 versions prior to 20.1R2-S1, 20.1R3;
20.2 versions prior to 20.2R2, 20.2R2-S1, 20.2R3;
20.3 versions prior to 20.3R1-S1.

QID detection logic: (Authenticated)
It checks for vulnerable Junos OS version.

Successful exploitation allows attacker to execute remote code.