« Volver al listado

CVE-2017-2348

Estado: ModificadaAlta (7.5)—

El demonio jdhcpd mejorado de Juniper puede experimentar un uso elevado de la CPU, o bloquearse y reiniciar al recibir un paquete UDP IPv6 no válido. La utilización elevada de la CPU y los bloqueos repetidos del demonio jdhcpd pueden resultar en una denegación de servicio a medida que se interrumpe el servicio DHCP. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema. Las versiones afectadas son Juniper Networks Junos OS versión 14.1X53 anterior a 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 en QFX, EX, QFabric System; versión 15.1 anterior a 15.1F2-S18, 15.1R4 en todos los productos y plataformas; versión 15.1X49 anterior a 15.1X49-D80 en SRX; versión 15.1X53 anterior a 15.1X53-D51, 15.1X53-D60 en NFX, QFX, EX.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-2348",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40"
            }
          ],
          "platforms": [
            "QFX, EX, QFabric System"
          ]
        },
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "15.1 prior to 15.1F2-S18, 15.1R4"
            }
          ],
          "platforms": [
            "all products and platforms"
          ]
        },
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "15.1X49 prior to 15.1X49-D80"
            }
          ],
          "platforms": [
            "SRX"
          ]
        },
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "15.1X53 prior to 15.1X53-D51, 15.1X53-D60"
            }
          ],
          "platforms": [
            "NFX, QFX, EX"
          ]
        }
      ]
    }
  ],
  "published": "2017-07-17T13:18:24.563",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1038899",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10800",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securitytracker.com/id/1038899",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10800",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S18, 15.1R4 on all products and platforms; 15.1X49 prior to 15.1X49-D80 on SRX; 15.1X53 prior to 15.1X53-D51, 15.1X53-D60 on NFX, QFX, EX."
    },
    {
      "lang": "es",
      "value": "El demonio jdhcpd mejorado de Juniper puede experimentar un uso elevado de la CPU, o bloquearse y reiniciar al recibir un paquete UDP IPv6 no válido. La utilización elevada de la CPU y los bloqueos repetidos del demonio jdhcpd pueden resultar en una denegación de servicio a medida que se interrumpe el servicio DHCP. Ningún otro producto o plataforma de Juniper Networks está afectada por este problema. Las versiones afectadas son Juniper Networks Junos OS versión 14.1X53 anterior a 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 en QFX, EX, QFabric System; versión 15.1 anterior a 15.1F2-S18, 15.1R4 en todos los productos y plataformas; versión 15.1X49 anterior a 15.1X49-D80 en SRX; versión 15.1X53 anterior a 15.1X53-D51, 15.1X53-D60 en NFX, QFX, EX."
    }
  ],
  "lastModified": "2026-06-17T01:16:01.343",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C7FCCC1-B151-465A-8327-26DB5DC074F0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d38:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "321F9E68-E55C-4EF0-B6CC-1D7BDA3966A2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A545D686-25FD-47CD-838A-CF69FB707253"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0146AA9-C513-4871-A62A-52C9F40EB958"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A18672EF-E33D-4ACE-BB0A-561812F502C7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18468579-0195-4DDE-BAA5-4BE4068F3A69"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "870244F3-1C05-4F10-A205-5189BB860F46"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "235EE40B-AA15-4F39-8087-A051F4F70995"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17330544-3AFC-463E-A146-2840A8AE17D2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "884E4A85-ED42-4391-9FDD-9052F957743A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1901864B-688B-4352-A587-4B96B4E49FB1"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B6670FB-9F5A-469B-97F2-074C28572065"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B71FB14A-67D4-4EDD-BB32-07764F5AFA6E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E87C765-8D68-404A-AC71-3F22A7260E8C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E3B807C-196D-42B8-9042-7582A1366772"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83FEEE8F-9279-46F2-BAF9-A60537020C61"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDDE1048-BFEA-4A3E-8270-27C538A68837"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC517CD0-FF35-498F-AD33-683B43CA3829"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d47:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C2A9C1A-AEE4-4CD6-91D7-D0E9F2717512"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d48:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1749B778-0E36-4539-8668-89F4460F251F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "962CCED8-E321-4878-9BE6-0DC33778559A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}