漏洞标题
Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: 将IGMP traffic发送到孤立VLAN时,会出现 packet flooding 。
漏洞描述信息
JUNOS OS:QFX5000 系列、EX2300、EX3400、EX4100、EX4400 和 EX4600:当将 IGMP 流量发送到隔离的 VLAN 时,会发生数据包泛洪。
CVSS信息
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
对因果或异常条件的不恰当检查
漏洞标题
Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN
漏洞描述信息
An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600 allows a adjacent attacker to send specific traffic, which leads to packet flooding, resulting in a Denial of Service (DoS).
When a specific IGMP packet is received in an isolated VLAN, it is duplicated to all other ports under the primary VLAN, which causes a flood.
This issue affects QFX5000 series, EX2300, EX3400, EX4100, EX4400 and EX4600 platforms only.
This issue affects Juniper Junos OS on on QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600:
* All versions prior to 20.4R3-S5;
* 21.1 versions prior to 21.1R3-S4;
* 21.2 versions prior to 21.2R3-S3;
* 21.3 versions prior to 21.3R3-S5;
* 21.4 versions prior to 21.4R3-S2;
* 22.1 versions prior to 22.1R3;
* 22.2 versions prior to 22.2R3;
* 22.3 versions prior to 22.3R2.
CVSS信息
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
对异常条件检查或处理不恰当
漏洞标题
Juniper Networks Junos OS 安全漏洞
漏洞描述信息
Juniper Networks Junos OS是美国瞻博网络(Juniper Networks)公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在安全漏洞,该漏洞源于数据包转发引擎 (pfe) 中的异常情况检查或处理不当漏洞允许相邻攻击者发送特定流量,从而导致数据包泛洪,导致拒绝服务 (DoS)。
CVSS信息
N/A
漏洞类别
其他