Skip to content
OpenAdvisories

Archive

13 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /13 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2017-10621

    Junos OS: Denial of service vulnerability in telnetd

    A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of service. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D50; 14.1 prior to 1…

    Juniper Networks Junos OS Network devices
  • Medium 5.3
    CVE-2017-10616

    Contrail: hard coded credentials

    The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-201…

    Juniper Networks Contrail Network devices
  • Medium 4.4
    CVE-2017-10606

    SRX Series: Cryptographic weakness in SRX300 Series TPM Firmware

    Version 4.40 of the TPM (Trusted Platform Module) firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an attacker to decrypt sensitive information in SRX300 Series products. The TPM is used in the SRX300 S…

    Juniper Networks Junos OS Network devices
  • Medium 5.3
    CVE-2017-10614

    Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd

    A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 1…

    Juniper Networks Junos OS Network devices
  • Medium 5.9
    CVE-2017-10618

    Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes

    When the 'bgp-error-tolerance' feature â€" designed to help mitigate remote session resets from malformed path attributes â€" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing…

    Juniper Networks Junos OS Network devices
  • Medium 5.5
    CVE-2017-10613

    Junos OS: A kernel hang may occur due to a specific loopback filter action command

    A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the lo…

    Juniper Networks Junos OS Network devices
  • Medium 5.0
    CVE-2017-10617 Public exploit

    Contrail: XML External Entity (XXE) vulnerability

    The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 pri…

    Juniper Networks Contrail Network devices
  • Medium 6.5
    CVE-2017-10611

    Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled

    If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PF…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2016-6815

    Moderate severity vulnerability that affects org.apache.ranger:ranger

    In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.

    Apache Software Foundation Apache Ranger org.apache.ranger:ranger Maven