CVE-2017-2330

published 2017-04-24

CVE-2017-2330: A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated…

medium 6.2 CVSS 3.0

AV L AC L PR N UI N S U C N I N A H

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves, until all resources are consumed on the system, leading to a denial of service to the entire system until it is restarted. Continued attacks by an unauthenticated, local user, can lead to persistent denials of services.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
juniper	northstar_controller	<= 2.1.0	—
juniper_networks	northstar_controller_application	—	—

CWE-834