DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Juniper JUNOS, SRX Series und MX Series: Schwachstellen ermöglichen Denial of Service
Advisory ansehen veröffentlicht 2023-01-11
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper SRX Series und Juniper MX Series ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-22417US | high7.5 | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated attack… | ||||
| CVE-2023-22416US | — | — | ||
A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SR… | ||||
| CVE-2023-22415US | — | — | ||
An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Ser… | ||||
| CVE-2023-22413US | — | — | ||
An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause De… | ||||
| CVE-2023-22412US | — | — | ||
An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attack… | ||||
| CVE-2023-22411US | — | — | ||
An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (Do… | ||||
| CVE-2023-22410US | medium6.5 | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Networks Junos OS on MX Series platforms with MPC10/MPC11 line cards, allows an unauthenticated ad… | ||||
| CVE-2023-22409US | — | — | ||
An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Ser… | ||||
| CVE-2023-22408US | — | — | ||
An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a Denia… | ||||
| CVE-2023-22404US | — | — | ||
An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon (iked) of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an authenticated, networ… | ||||
| CVE-2023-22394US | — | — | ||
An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to cau… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
- Juniper Security Advisory vom 2023-01-11external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan