CVE-2017-2348 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S18, 15.1R4 on all products and platforms; 15.1X49 prior to 15.1X49-D80 on SRX; 15.1X53 prior to 15.1X53-D51, 15.1X53-D60 on NFX, QFX, EX.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Juniper	Junos	14.1x53

Related Weaknesses (CWE)

CWE-400

References

http://www.securitytracker.com/id/1038899Third Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10800Vendor Advisory
http://www.securitytracker.com/id/1038899Third Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10800Vendor Advisory

FAQ

What is CVE-2017-2348?

CVE-2017-2348 is a vulnerability with a CVSS score of 7.5 (HIGH). The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd da...

How severe is CVE-2017-2348?

CVE-2017-2348 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2348?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Junos.