deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-11818
Published: 2017-10-13
Description: The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass vulnerability when it fails to validate an integrity-level check, aka "Windows Storage Security Feature Bypass Vulnerability".
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/101101; http://www.securitytracker.com/id/1039526; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11818
CVE: CVE-2017-11819
Published: 2017-10-13
Description: Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory, aka "Windows Shell Remote Code Execution Vulnerability".
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101121; http://www.securitytracker.com/id/1039537; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11819
CVE: CVE-2017-11820
Published: 2017-10-13
Description: Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11777.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101097; http://www.securitytracker.com/id/1039540; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11820
CVE: CVE-2017-11821
Published: 2017-10-13
Description: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, and CVE-2017-11812.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101123; http://www.securitytracker.com/id/1039529; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11821
CVE: CVE-2017-11822
Published: 2017-10-13
Description: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11813.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101122; http://www.securitytracker.com/id/1039532; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11822
CVE: CVE-2017-11823
Published: 2017-10-13
Description: The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Microsoft Windows Security Feature Bypass".
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: http://www.securityfocus.com/bid/101102; http://www.securitytracker.com/id/1039526; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11823
CVE: CVE-2017-11824
Published: 2017-10-13
Description: The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles objects in memory, aka "Windows Graphics Component Elevation of Privilege Vulnerability".
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/101099; http://www.securitytracker.com/id/1039536; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11824
CVE: CVE-2017-11825
Published: 2017-10-13
Description: Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101124; http://www.securitytracker.com/id/1039539; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11825
CVE: CVE-2017-11826
Published: 2017-10-13
Description: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/101219; http://www.securitytracker.com/id/1039541; https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html
CVE: CVE-2017-11829
Published: 2017-10-13
Description: Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552
References: http://www.securityfocus.com/bid/101213; http://www.securitytracker.com/id/1039526; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11829
CVE: CVE-2017-8689
Published: 2017-10-13
Description: The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8694.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/101128; http://www.securitytracker.com/id/1039526; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8689
CVE: CVE-2017-8693
Published: 2017-10-13
Description: The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka "Microsoft Graphics Information Disclosure Vulnerability".
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101096; http://www.securitytracker.com/id/1039536; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8693
CVE: CVE-2017-8694
Published: 2017-10-13
Description: The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8689.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/101100; http://www.securitytracker.com/id/1039526; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8694
CVE: CVE-2017-8703
Published: 2017-10-13
Description: The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles objects in memory, aka "Windows Subsystem for Linux Denial of Service Vulnerability".
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101164; http://www.securitytracker.com/id/1039534; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8703
CVE: CVE-2017-8715
Published: 2017-10-13
Description: The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Windows Security Feature Bypass".
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/101163; http://www.securitytracker.com/id/1039526; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8715
CVE: CVE-2017-8717
Published: 2017-10-13
Description: The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8718.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101161; http://www.securitytracker.com/id/1039527; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8717
CVE: CVE-2017-8718
Published: 2017-10-13
Description: The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to take control of an affected system, due to how it handles objects in memory, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8717.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101162; http://www.securitytracker.com/id/1039527; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8718
CVE: CVE-2017-8726
Published: 2017-10-13
Description: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how affected Microsoft scripting engines handle objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11794 and CVE-2017-11803.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101084; http://www.securitytracker.com/id/1039529; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8726
CVE: CVE-2017-8727
Published: 2017-10-13
Description: Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Windows Text Services Framework handles objects in memory, aka "Windows Shell Memory Corruption Vulnerability".
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101142; http://www.securitytracker.com/id/1039537; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8727
CVE: CVE-2016-6815
Published: 2017-10-13
Description: In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-255
References: http://www.securityfocus.com/bid/94221; https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger; http://www.securityfocus.com/bid/94221
CVE: CVE-2017-15012
Published: 2017-10-13
Description: OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which allows any authenticated user to hijack an arbitrary file from the Content Server filesystem; because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://seclists.org/bugtraq/2017/Oct/19; http://www.securityfocus.com/bid/101639; https://www.exploit-db.com/exploits/43003/
CVE: CVE-2017-15013
Published: 2017-10-13
Description: OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server stores information about uploaded files in dmr_content objects, which are queryable and "editable" (before release 7.2P02, any authenticated user was able to edit dmr_content objects; now any authenticated user may delete a dmr_content object and then create a new one with the old identifier) by authenticated users; this allows any authenticated user to replace the content of security-sensitive dmr_content objects (for example, dmr_content related to dm_method objects) and gain superuser privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://seclists.org/bugtraq/2017/Oct/19; http://www.securityfocus.com/bid/101639; https://www.exploit-db.com/exploits/43004/
CVE: CVE-2017-15014
Published: 2017-10-13
Description: OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows authenticated users to download arbitrary content files regardless of the attacker's repository permissions: When an authenticated user uploads content to the repository, he performs the following steps: (1) calls the START_PUSH RPC-command; (2) uploads the file to the content server; (3) calls the END_PUSH_V2 RPC-command (here, Content Server returns a DATA_TICKET integer, intended to identify the location of the uploaded file on the Content Server filesystem); (4) creates a dmr_content object in the repository, which has a value of data_ticket equal to the value of DATA_TICKET returned at the end of END_PUSH_V2 call. As the result of this design, any authenticated user may create his own dmr_content object, pointing to already existing content in the Content Server filesystem.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: http://seclists.org/bugtraq/2017/Oct/19; http://www.securityfocus.com/bid/101639; https://www.exploit-db.com/exploits/43005/
CVE: CVE-2017-15276
Published: 2017-10-13
Description: OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading content using batches (TAR archives). When unpacking TAR archives, Content Server fails to verify the contents of an archive, which causes a path traversal vulnerability via symlinks. Because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://seclists.org/bugtraq/2017/Oct/19; http://www.securityfocus.com/bid/101639; https://www.exploit-db.com/exploits/43002/
CVE: CVE-2016-1261
Published: 2017-10-13
Description: J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://kb.juniper.net/JSA10723; https://kb.juniper.net/JSA10723
CVE: CVE-2016-1265
Published: 2017-10-13
Description: A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-255, CWE-352
References: https://kb.juniper.net/JSA10727; https://kb.juniper.net/JSA10727
CVE: CVE-2016-4921
Published: 2017-10-13
Description: By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop information for legitimate traffic. In extreme cases, the crafted IPv6 traffic may result in a total resource exhaustion and kernel panic. The issue is triggered by traffic destined to the router. Transit traffic does not trigger the vulnerability. This issue only affects devices with IPv6 enabled and configured. Devices not configured to process IPv6 traffic are unaffected by this vulnerability. This issue was found during internal product security testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.3 prior to 12.3R3-S4; 12.3X48 prior to 12.3X48-D30; 13.3 prior to 13.3R10, 13.3R4-S11; 14.1 prior to 14.1R2-S8, 14.1R4-S12, 14.1R8; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R3-S10, 14.2R4-S7, 14.2R6; 15.1 prior to 15.1F2-S5, 15.1F5-S2, 15.1F6, 15.1R3; 15.1X49 prior to 15.1X49-D40; 15.1X53 prior to 15.1X53-D57, 15.1X53-D70.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/93532; http://www.securitytracker.com/id/1037014; https://kb.juniper.net/JSA10762
CVE: CVE-2016-4922
Published: 2017-10-13
Description: Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system. This may allow any user with permissions to run these CLI commands the ability to achieve elevated privileges and gain complete control of the device. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X46 prior to 12.1X46-D60; 12.1X47 prior to 12.1X47-D45; 12.3 prior to 12.3R12; 12.3X48 prior to 12.3X48-D35; 13.2 prior to 13.2R9; 13.3 prior to 13.3R4-S11, 13.3R9; 14.1 prior to 14.1R4-S12, 14.1R7; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R3-S10, 14.2R4-S7, 14.2R5; 15.1 prior to 15.1F4, 15.1R3; 15.1X49 prior to 15.1X49-D60; 15.1X53 prior to 15.1X53-D57, 15.1X53-D70.
CVSS Score: 8.4 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/bid/93534; http://www.securitytracker.com/id/1037013; https://kb.juniper.net/JSA10763
CVE: CVE-2016-4923
Published: 2017-10-13
Description: Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D40; 12.1X47 prior to 12.1X47-D30; 12.3 prior to 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2X51 prior to 13.2X51-D39, 13.2X51-D40; 13.3 prior to 13.3R9; 14.1 prior to 14.1R6; 14.2 prior to 14.2R6; 15.1 prior to 15.1R3; 15.1X49 prior to 15.1X49-D20; 15.1X53 prior to 15.1X53-D57.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: http://www.securityfocus.com/bid/93529; https://kb.juniper.net/JSA10764; http://www.securityfocus.com/bid/93529
CVE: CVE-2016-4924
Published: 2017-10-13
Description: An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product security testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 15.1 prior to 15.1F5; 14.1 prior to 14.1R8
CVSS Score: 8.4 (HIGH)
CWE: CWE-275
References: http://www.securityfocus.com/bid/93531; https://kb.juniper.net/JSA10766; http://www.securityfocus.com/bid/93531
CVE: CVE-2016-4925
Published: 2017-10-13
Description: Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on line card resets and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Routers not configured to process IPv6 traffic are unaffected by this vulnerability. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/93533; http://www.securitytracker.com/id/1037012; https://kb.juniper.net/JSA10767
CVE: CVE-2017-10606
Published: 2017-10-13
Description: Version 4.40 of the TPM (Trusted Platform Module) firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an attacker to decrypt sensitive information in SRX300 Series products. The TPM is used in the SRX300 Series to encrypt sensitive configuration data. While other products also ship with a TPM, no other products or platforms are affected by this vulnerability. Customers can confirm the version of TPM firmware via the 'show security tpm status' command. This issue was discovered by an external security researcher. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 4.4 (MEDIUM)
References: https://kb.juniper.net/JSA10809; https://kb.juniper.net/JSA10809
CVE: CVE-2017-10607
Published: 2017-10-13
Description: Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit (PDU) sent directly to the router, which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs, which are transitive in nature, this issue can only be triggered by a packet sent directly to the IP address of the router. Repeated crashes of the rpd daemon can result in an extended denial of service condition. This issue only affects devices running Junos OS 16.1R1 and services releases based off of 16.1R1 (e.g. 16.1R1-S1, 16.1R1-S2, 16.1R1-S3). No prior versions of Junos OS are affected by this vulnerability, and this issue was resolved in Junos OS 16.2 prior to 16.2R1. No other Juniper Networks products or platforms are affected by this issue. This issue was found during internal product security testing.
CVSS Score: 7.5 (HIGH)
References: https://kb.juniper.net/JSA10810; https://kb.juniper.net/JSA10810
CVE: CVE-2017-10608
Published: 2017-10-13
Description: Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulnerability in the Sun/MS-RPC ALG services component of Junos OS allows an attacker to cause a repeated denial of service against the target. Repeated traffic in a cluster may cause repeated flip-flop failure operations or full failure to the flowd daemon halting traffic on all nodes. Only IPv6 traffic is affected by this issue. IPv4 traffic is unaffected. This issues is not seen with to-host traffic. This issue has no relation with HA services themselves, only the ALG service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55 on SRX; 12.1X47 prior to 12.1X47-D45 on SRX; 12.3X48 prior to 12.3X48-D32, 12.3X48-D35 on SRX; 15.1X49 prior to 15.1X49-D60 on SRX.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://kb.juniper.net/JSA10811; https://kb.juniper.net/JSA10811