deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-37839
Published: 2023-07-13
Description: An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/yezere/src/blob/main/Dedecms%20v5.7.109%20Background%20Command%20Execution%20Vulnerability.md; https://github.com/yezere/src/blob/main/Dedecms%20v5.7.109%20Background%20Command%20Execution%20Vulnerability.md
CVE: CVE-2023-37849
Published: 2023-07-13
Description: A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-427
References: https://heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for-Windows-Installer/; https://www.pandasecurity.com/en/homeusers/vpn/; https://www.pandasecurity.com/en/support/card?id=100080
CVE: CVE-2023-37272
Published: 2023-07-13
Description: JS7 is an Open Source Job Scheduler. Users specify file names when uploading files holding user-generated documentation for JOC Cockpit. Specifically crafted file names allow an XSS attack to inject code that is executed with the browser. Risk of the vulnerability is considered high for branch 1.13 of JobScheduler (JS1). The vulnerability does not affect branch 2.x of JobScheduler (JS7) for releases after 2.1.0. The vulnerability is resolved with release 1.13.19.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://change.sos-berlin.com/browse/SET-226; https://github.com/sos-berlin/joc-cockpit/security/advisories/GHSA-qr44-gm3x-7hfc; https://change.sos-berlin.com/browse/SET-226
CVE: CVE-2023-37273
Published: 2023-07-13
Description: Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing `docker compose run auto-gpt` in the repo root uses a different docker-compose.yml file from the one suggested in the official docker set up instructions. The docker-compose.yml file located in the repo root mounts itself into the docker container without write protection. This means that if malicious custom python code is executed via the `execute_python_file` and `execute_python_code` commands, it can overwrite the docker-compose.yml file and abuse it to gain control of the host system the next time Auto-GPT is started. The issue has been patched in version 0.4.3.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/Significant-Gravitas/Auto-GPT/pull/4761; https://github.com/Significant-Gravitas/Auto-GPT/security/advisories/GHSA-x5gj-2chr-4ch6; https://github.com/Significant-Gravitas/Auto-GPT/pull/4761
CVE: CVE-2023-37274
Published: 2023-07-13
Description: Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. When Auto-GPT is executed directly on the host system via the provided run.sh or run.bat files, custom Python code execution is sandboxed using a temporary dedicated docker container which should not have access to any files outside of the Auto-GPT workspace directory.
Before v0.4.3, the `execute_python_code` command (introduced in v0.4.1) does not sanitize the `basename` arg before writing LLM-supplied code to a file with an LLM-supplied name. This allows for a path traversal attack that can overwrite any .py file outside the workspace directory by specifying a `basename` such as `../../../main.py`. This can further be abused to achieve arbitrary code execution on the host running Auto-GPT by e.g. overwriting autogpt/main.py which will be executed outside of the docker environment meant to sandbox custom python code execution the next time Auto-GPT is started. The issue has been patched in version 0.4.3. As a workaround, the risk introduced by this vulnerability can be remediated by running Auto-GPT in a virtual machine, or another environment in which damage to files or corruption of the program is not a critical problem.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://github.com/Significant-Gravitas/Auto-GPT/pull/4756; https://github.com/Significant-Gravitas/Auto-GPT/security/advisories/GHSA-5h38-mgp9-rj5f; https://github.com/Significant-Gravitas/Auto-GPT/pull/4756
CVE: CVE-2023-37275
Published: 2023-07-13
Description: Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to review and control which commands should be executed. Before v0.4.3, it was possible for a malicious external resource (such as a website browsed by Auto-GPT) to cause misleading messages to be printed to the console by getting the LLM to regurgitate JSON encoded ANSI escape sequences (`\u001b[`). These escape sequences were JSON decoded and printed to the console as part of the model's "thinking process". The issue has been patched in release version 0.4.3.

CVSS Score: 3.1 (LOW)
CWE: CWE-117
References: https://github.com/Significant-Gravitas/Auto-GPT/pull/4810; https://github.com/Significant-Gravitas/Auto-GPT/security/advisories/GHSA-r7f7-qrrv-3fjh; https://github.com/Significant-Gravitas/Auto-GPT/pull/4810
CVE: CVE-2023-37278
Published: 2023-07-13
Description: GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched in version 10.0.9.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/releases/tag/10.0.9; https://github.com/glpi-project/glpi/security/advisories/GHSA-46gp-f96h-53w4; https://github.com/glpi-project/glpi/releases/tag/10.0.9
CVE: CVE-2023-37836
Published: 2023-07-13
Description: libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/thorfdbg/libjpeg/issues/87#BUG1; https://github.com/thorfdbg/libjpeg/issues/87#BUG1
CVE: CVE-2023-37837
Published: 2023-07-13
Description: libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/thorfdbg/libjpeg/issues/87#BUG0; https://github.com/thorfdbg/libjpeg/issues/87#BUG0
CVE: CVE-2023-37466
Published: 2023-07-14
Description: vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, `Promise` handler sanitization can be bypassed with the `@@species` accessor property allowing attackers to escape the sandbox and run arbitrary code, potentially allowing remote code execution inside the context of vm2 sandbox. Version 3.10.0 contains a patch for the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/patriksimek/vm2/commit/d9a1fde8ec5a5a9c9e5a69bf91d703950859d744; https://github.com/patriksimek/vm2/releases/tag/v3.10.0; https://github.com/patriksimek/vm2/security/advisories/GHSA-cchq-frgv-rjh5
CVE: CVE-2023-37714
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromRouteStatic/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromRouteStatic/report.md
CVE: CVE-2023-37715
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fmL7ProtForm/reprot.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fmL7ProtForm/reprot.md
CVE: CVE-2023-37716
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromNatStaticSetting/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromNatStaticSetting/report.md
CVE: CVE-2023-37717
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md
CVE: CVE-2023-37718
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeClientFilter/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeClientFilter/report.md
CVE: CVE-2023-37719
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromP2pListFilter/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromP2pListFilter/report.md
CVE: CVE-2023-37721
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeMacFilter/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeMacFilter/report.md
CVE: CVE-2023-37722
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeUrlFilter/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeUrlFilter/report.md
CVE: CVE-2023-37723
Published: 2023-07-14
Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromqossetting/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromqossetting/report.md
CVE: CVE-2023-3668
Published: 2023-07-14
Description: Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21.
CVSS Score: 7.2 (HIGH)
CWE: CWE-116
References: https://github.com/froxlor/froxlor/commit/03b5a921ff308eeab21bf9d240f27783c8591965; https://huntr.dev/bounties/df8cccf4-a340-440e-a7e0-1b42e757d66e; https://github.com/froxlor/froxlor/commit/03b5a921ff308eeab21bf9d240f27783c8591965
CVE: CVE-2023-2082
Published: 2023-07-14
Description: The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.6 due to insufficient sanitization and escaping on the 'text value set via the bmc_post_reception action. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to inject arbitrary web scripts into pages that execute whenever a victim accesses a page with the injected scripts.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/buymeacoffee/trunk/admin/class-buy-me-a-coffee-admin.php?rev=2816542; https://plugins.trac.wordpress.org/browser/buymeacoffee/trunk/includes/class-buy-me-a-coffee.php?rev=2319979#L162; https://plugins.trac.wordpress.org/changeset?old_path=%2Fbuymeacoffee%2Ftags%2F3.6&old=2922493&new_path=%2Fbuymeacoffee%2Ftags%2F3.7&new=2922493&sfp_email=&sfph_mail=
CVE: CVE-2023-38286
Published: 2023-07-14
Description: Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://github.com/p1n93r/SpringBootAdmin-thymeleaf-SSTI; https://github.com/p1n93r/SpringBootAdmin-thymeleaf-SSTI
CVE: CVE-2023-3513
Published: 2023-07-14
Description: Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-502, CWE-269
References: https://starlabs.sg/advisories/23/23-3513/; https://starlabs.sg/advisories/23/23-3513/
CVE: CVE-2023-3514
Published: 2023-07-14
Description: Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.


CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://starlabs.sg/advisories/23/23-3514/; https://starlabs.sg/advisories/23/23-3514/
CVE: CVE-2023-3648
Published: 2023-07-14
Description: Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-762
References: https://gitlab.com/wireshark/wireshark/-/issues/19105; https://www.wireshark.org/security/wnpa-sec-2023-21.html; https://gitlab.com/wireshark/wireshark/-/issues/19105
CVE: CVE-2023-3649
Published: 2023-07-14
Description: iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://gitlab.com/wireshark/wireshark/-/issues/19164; https://www.wireshark.org/security/wnpa-sec-2023-22.html; https://gitlab.com/wireshark/wireshark/-/issues/19164
CVE: CVE-2023-3672
Published: 2023-07-14
Description: Cross-site Scripting (XSS) - DOM in GitHub repository plaidweb/webmention.js prior to 0.5.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/plaidweb/webmention.js/commit/3551b66b3e40da37fee89ecf72930c5efdc53011; https://huntr.dev/bounties/75cfb7ad-a75f-45ff-8688-32a9c55179aa; https://github.com/plaidweb/webmention.js/commit/3551b66b3e40da37fee89ecf72930c5efdc53011
CVE: CVE-2023-2975
Published: 2023-07-14
Description: Issue summary: The AES-SIV cipher implementation contains a bug that causes
it to ignore empty associated data entries which are unauthenticated as
a consequence.

Impact summary: Applications that use the AES-SIV algorithm and want to
authenticate empty data entries as associated data can be misled by removing,
adding or reordering such empty entries as these are ignored by the OpenSSL
implementation. We are currently unaware of any such applications.

The AES-SIV algorithm allows for authentication of multiple associated
data entries along with the encryption. To authenticate empty data the
application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with
NULL pointer as the output buffer and 0 as the input buffer length.
The AES-SIV implementation in OpenSSL just returns success for such a call
instead of performing the associated data authentication operation.
The empty data thus will not be authenticated.

As this issue does not affect non-empty associated data authentication and
we expect it to be rare for an application to use empty associated data
entries this is qualified as Low severity issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-354, CWE-287
References: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598; https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc; https://www.openssl.org/news/secadv/20230714.txt
CVE: CVE-2023-3433
Published: 2023-07-14
Description: The "nickname" field within Savoir-faire Linux's Jami application is susceptible to a failed state when a user inserts special characters into the field. When present, these special characters, make it so the application cannot create the signature for the user and results in a local denial of service to the application. 
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://blog.blacklanternsecurity.com/p/Jami-Local-Denial-Of-Service-and-QRC-Handler-Vulnerabilities; https://git.jami.net/savoirfairelinux/jami-client-qt/-/wikis/Changelog#nightly-january-10; https://review.jami.net/c/jami-daemon/+/23575
CVE: CVE-2023-3434
Published: 2023-07-14
Description: Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. 

This allows an attacker to send a custom HTML anchor tag to pass a string value to the Windows QRC Handler through the Jami messenger.


CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://blog.blacklanternsecurity.com/p/Jami-Local-Denial-Of-Service-and-QRC-Handler-Vulnerabilities; https://git.jami.net/savoirfairelinux/jami-client-qt/-/wikis/Changelog#nightly-january-10; https://review.jami.net/c/jami-client-qt/+/23569
CVE: CVE-2023-3673
Published: 2023-07-14
Description:  SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9; https://huntr.dev/bounties/46ca0934-5260-477b-9e86-7b16bb18d0a9; https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
CVE: CVE-2023-36119
Published: 2023-07-14
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-36831
Published: 2023-07-14
Description: An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition.  Service restoration is only possible by rebooting the system.

The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations.  Other products, platforms, and configurations are not affected by this vulnerability.

This issue affects Juniper Networks Junos OS on SRX Series:
22.2 versions prior to 22.2R3;
22.3 versions prior to 22.3R2-S1, 22.3R3;
22.4 versions prior to 22.4R1-S2, 22.4R2.

This issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.

CVSS Score: 7.5 (HIGH)
CWE: CWE-703
References: https://supportportal.juniper.net/JSA71636; https://supportportal.juniper.net/JSA71636
CVE: CVE-2023-35692
Published: 2023-07-14
Description: In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-273
References: https://source.android.com/security/bulletin/pixel/2023-07-01; https://source.android.com/security/bulletin/pixel/2023-07-01
CVE: CVE-2023-36832
Published: 2023-07-14
Description: An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-based attacker to send specific packets to an Aggregated Multiservices (AMS) interface on the device, causing the packet forwarding engine (PFE) to crash, resulting in a Denial of Service (DoS).  Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.

This issue is only triggered by packets destined to a local-interface via a service-interface (AMS).  AMS is only supported on the MS-MPC, MS-MIC, and MX-SPC3 cards.  This issue is not experienced on other types of interfaces or configurations.  Additionally, transit traffic does not trigger this issue.

This issue affects Juniper Networks Junos OS on MX Series:
All versions prior to 19.1R3-S10;
19.2 versions prior to 19.2R3-S7;
19.3 versions prior to 19.3R3-S8;
19.4 versions prior to 19.4R3-S12;
20.2 versions prior to 20.2R3-S8;
20.4 versions prior to 20.4R3-S7;
21.1 versions prior to 21.1R3-S5;
21.2 versions prior to 21.2R3-S5;
21.3 versions prior to 21.3R3-S4;
21.4 versions prior to 21.4R3-S3;
22.1 versions prior to 22.1R3-S2;
22.2 versions prior to 22.2R3;
22.3 versions prior to 22.3R2-S1, 22.3R3;
22.4 versions prior to 22.4R1-S2, 22.4R2.

CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://supportportal.juniper.net/JSA71639; https://supportportal.juniper.net/JSA71639
CVE: CVE-2023-28985
Published: 2023-07-14
Description: An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention (IDP) of Juniper Networks SRX Series and MX Series allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). Continued receipt of this specific packet will cause a sustained Denial of Service condition.

On all SRX Series and MX Series platforms, where IDP is enabled and a specific malformed SSL packet is received, the SSL detector crashes leading to an FPC core.

This issue affects Juniper Networks SRX Series and MX Series prior to SigPack 3598.

In order to identify the current SigPack version, following command can be used:

user@junos# show security idp security-package-version
CVSS Score: 7.5 (HIGH)
CWE: CWE-1286
References: https://supportportal.juniper.net/JSA71662; https://supportportal.juniper.net/JSA71662