CVE-2019-0071 — Improper Verification of Cryptographic Signature in Networks Junos OS

CWE-347 — Improper Verification of Cryptographic Signature CWE-354 — Improper Validation of Integrity Check Value3 documents3 sources

Severity

7.8HIGHNVD

EPSS

0.0%

top 99.33%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Juniper Networks Junos OS Juniper Junos Juniper EX Series +1 more

Timeline

PublishedOct 9

Latest updateMay 24

Description

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrity checking. This may allow a locally authenticated user with shell access to install untrusted executable images, and elevate privileges to gain full control of the system. During the installation of an …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5juniper_networks/junos_os18.1R3-S4, 18.3R1-S3+1

▶NVDjuniper/junos18.1, 18.3+1

▶juniperjuniper/junos_os

▶juniperjuniper/ex_series

🔴Vulnerability Details

GHSA

GHSA-8rxr-vx8g-7w4h: Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed↗2022-05-24

▶

📋Vendor Advisories

Juniper

CVE-2019-0071: Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specif↗2019-10-09

▶