CVE-2017-10615

Junos: Potential remote code execution vulnerability in PAM

State: Published
Severity: 9.8 Critical
Published: Oct 13, 2017
Updated: Sep 16, 2024
Reserved: Jun 28, 2017

Description

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Scores

CVSS	Score	Vector	Source
3.0	9.8 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	juniper

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Junos OSJuniper Networks	14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9Affected 14.1X53 prior to 14.1X53-D50Affected 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8Affected

References

https://kb.juniper.net/JSA10818
1040039vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.