DeutschShown in its original language — a full translation is planned for a future version.
Juniper JUNOS, SRX Series und MX Series: Schwachstellen ermöglichen Denial of Service
view advisory published 2023-01-11
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper SRX Series und Juniper MX Series ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-22417US | high7.5 | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated attack… | ||||
| CVE-2023-22416US | — | — | ||
A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SR… | ||||
| CVE-2023-22415US | — | — | ||
An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Ser… | ||||
| CVE-2023-22413US | — | — | ||
An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause De… | ||||
| CVE-2023-22412US | — | — | ||
An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attack… | ||||
| CVE-2023-22411US | — | — | ||
An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (Do… | ||||
| CVE-2023-22410US | medium6.5 | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Networks Junos OS on MX Series platforms with MPC10/MPC11 line cards, allows an unauthenticated ad… | ||||
| CVE-2023-22409US | — | — | ||
An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Ser… | ||||
| CVE-2023-22408US | — | — | ||
An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a Denia… | ||||
| CVE-2023-22404US | — | — | ||
An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon (iked) of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an authenticated, networ… | ||||
| CVE-2023-22394US | — | — | ||
An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to cau… | ||||
02
references
External citations — patches, advisories, analysis.
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan