DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Juniper Patchday Oktober 2023
Advisory ansehen veröffentlicht 2023-10-11
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Juniper Produkten ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern.
01
beschreibt (31)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-44204US | medium6.5 | — | ||
An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, n… | ||||
| CVE-2023-44203US | medium6.5 | — | ||
An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series, EX2300, EX3400, EX4100,… | ||||
| CVE-2023-44201US | medium5.5 | — | ||
An Incorrect Permission Assignment for Critical Resource vulnerability in a specific file of Juniper Networks Junos OS and Junos OS Evolved allows a local authenticated attacker t… | ||||
| CVE-2023-44199US | high7.5 | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based, unaut… | ||||
| CVE-2023-44198US | high7.5 | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-bas… | ||||
| CVE-2023-44197US | high7.5 | — | ||
An Out-of-Bounds Write vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to ca… | ||||
| CVE-2023-44196US | medium6.5 | — | ||
An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS Evolved on PTX10003 Series allows an unauthenticated adj… | ||||
| CVE-2023-44195US | medium5.3 | — | ||
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the NetworkStack agent daemon (nsagentd) of Juniper Networks Junos OS Evolved allows an una… | ||||
| CVE-2023-44194US | high7.8OT erhöht | — | ||
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS allows an unauthenticated attacker with local access to the device to create a backdoor with root privi… | ||||
| CVE-2023-44193US | medium5.5 | — | ||
An Improper Release of Memory Before Removing Last Reference vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a local, low privileged attacker t… | ||||
| CVE-2023-44192US | high7.5 | — | ||
An Improper Input Validation vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause memory leak, lea… | ||||
| CVE-2023-44191US | high7.5 | — | ||
An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (Do… | ||||
| CVE-2023-44185US | high7.5 | — | ||
An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon receiv… | ||||
| CVE-2023-44184US | medium6.5 | — | ||
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon (mgd) process of Juniper Networks Junos OS and Junos OS Evolved a… | ||||
| CVE-2023-44183US | medium5.3 | — | ||
An Improper Input Validation vulnerability in the VxLAN packet forwarding engine (PFE) of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices allows an unauthentica… | ||||
| CVE-2023-44182US | high8.8 | — | ||
An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the NETCON… | ||||
| CVE-2023-44181US | high7.5 | — | ||
An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a… | ||||
| CVE-2023-44178US | medium5.5 | — | ||
A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial o… | ||||
| CVE-2023-44177US | medium5.5 | — | ||
A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading… | ||||
| CVE-2023-44176US | medium5.5 | — | ||
A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial o… | ||||
20 von 31 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Juniper Security Advisory vom 2023-10-11external
- Juniper Security Advisory vom 2023-10-11external
- Juniper Security Advisory vom 2023-10-11external
- Juniper Security Advisory vom 2023-10-11external
- Juniper Security Advisory vom 2023-10-11external
- Juniper Security Advisory vom 2023-10-11external
- Juniper Security Advisory vom 2023-10-11external
- Juniper Security Advisory vom 2023-10-11external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan