CVE-2017-2348

high-risk

Published 2017-07-17

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System; 15.1 prior to 15.1F2-S18, 15.1R4 on all products and platforms; 15.1X49 prior to 15.1X49-D80 on SRX; 15.1X53 prior to 15.1X53-D51, 15.1X53-D60 on NFX, QFX, EX.

Do I need to act?

0.45% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (20)

Junos

Affected Vendors

Juniper

References (4)

Third Party Advisory http://www.securitytracker.com/id/1038899

Vendor Advisory https://kb.juniper.net/JSA10800

Third Party Advisory http://www.securitytracker.com/id/1038899

Vendor Advisory https://kb.juniper.net/JSA10800

/ 100

high-risk

Severity 26/34 · High

Exploitability 2/34 · Minimal

Exposure 24/34 · High