CVE-2017-2348 — Uncontrolled Resource Consumption in Networks Junos OS

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 36.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Juniper Networks Junos OSJuniper JunosJuniper Junos OS+2 more
Timeline
PublishedJul 17
Latest updateMay 13

Description

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages5 packages

▶CVEListV5juniper_networks/junos_os4 versions+3
▶NVDjuniper/junos4 versions+3

🔴Vulnerability Details

1
GHSA
GHSA-3vv6-22qm-hgwq: The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet↗2022-05-13
▶

📋Vendor Advisories

1
Juniper
CVE-2017-2348: The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU↗2017-07-17
▶
CVE-2017-2348 — Uncontrolled Resource Consumption | cvebase