CVE-2023-44177 — Stack-based Buffer Overflow in Networks Junos OS

CWE-121 — Stack-based Buffer OverflowCWE-787 — Out-of-bounds Write4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 82.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Juniper Networks Junos OSJuniper Networks Junos OS EvolvedJuniper Junos+1 more
Timeline
PublishedOct 13

Description

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks: Junos OS: * All versions prior to 19.1R3-S10; * 19.2 versions prior to 19.2R3-S7; * 19.3 versions prior to 19.3R3-S8; * 19.4 versions prior to 19.4R3-S12; * 20.2 ver…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5juniper_networks/junos_os_evolved21.2 — 21.2R3-S6-EVO+7
▶CVEListV5juniper_networks/junos_os19.2 — 19.2R3-S7+12
▶NVDjuniper/junos< 20.4+8

🔴Vulnerability Details

2
GHSA
GHSA-pwfx-qrrf-76cp: A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a s↗2023-10-13
▶
CVEList
Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing↗2023-10-12
▶

📋Vendor Advisories

1
Juniper
CVE-2023-44177: A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a↗2023-10-13
▶
CVE-2023-44177 — Stack-based Buffer Overflow | cvebase