DeutschShown in its original language — a full translation is planned for a future version.
Juniper Patchday Juli 2023
view advisory published 2023-07-12
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Juniper Produkten ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern.
01
describes (48)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-2588US | high7.8 | Exploit | ||
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0. | ||||
| CVE-2023-36850US | — | — | ||
An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault Management(CFM) module of Juniper Networks Junos OS on MX Series(exc… | ||||
| CVE-2023-36849US | — | — | ||
An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an un… | ||||
| CVE-2023-36848US | — | — | ||
An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon (PPMD) of Juniper Networks Junos OS on MX Series(except MPC10, MPC11 and LC9600) all… | ||||
| CVE-2023-36840US | — | — | ||
A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a De… | ||||
| CVE-2023-36836US | medium4.7 | — | ||
A Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with… | ||||
| CVE-2023-36835US | high7.5 | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX10000 Series allows a network based a… | ||||
| CVE-2023-36834US | — | — | ||
An Incomplete Internal State Distinction vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series allows an adjacent attacke… | ||||
| CVE-2023-36838US | — | — | ||
An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a local, authenticated attacker with low privileges, to… | ||||
| CVE-2023-36833US | — | — | ||
A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows… | ||||
| CVE-2023-28985US | — | — | ||
An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention (IDP) of Juniper Networks SRX Series and MX Series allows an unauthenti… | ||||
| CVE-2023-36832US | — | — | ||
An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-based attacker to send… | ||||
| CVE-2023-36831US | — | — | ||
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes… | ||||
| CVE-2022-4378US | high7.8 | — | ||
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or pote… | ||||
| CVE-2022-42898US | high8.8 | — | ||
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos… | ||||
| CVE-2022-30123US | critical10.0 | — | ||
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack. | ||||
| CVE-2022-38023US | — | — | ||
Netlogon RPC Elevation of Privilege Vulnerability | ||||
| CVE-2022-41974US | high7.8 | — | ||
multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UN… | ||||
| CVE-2022-42703US | medium5.5 | Exploit | ||
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. | ||||
| CVE-2022-3276US | high8.8 | — | ||
Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsan… | ||||
showing 20 of 48
02
references
External citations — patches, advisories, analysis.
- Juniper Security Advisory vom 2023-07-12external
- Juniper Security Advisory vom 2023-07-12external
- Juniper Security Advisory vom 2023-07-12external
- Juniper Security Advisory vom 2023-07-12external
- Juniper Security Advisory vom 2023-07-12external
- Juniper Security Advisory vom 2023-07-12external
- Juniper Security Advisory vom 2023-07-12external
- Juniper Security Advisory vom 2023-07-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan