A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI the ability to load a malicious certificate file, leading to a limited Denial of Service (DoS) or privileged code execution.
By exploiting the set security certificates command with a crafted certificate file, a malicious attacker with access to the CLI could cause a crash of the command management daemon (mgd), limited to the local users command interpreter, or potentially trigger a stack-based buffer overflow.
This issue affects:
Junos OS:
Junos OS Evolved:
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Name | Vendor | Start Version | End Version |
---|---|---|---|
Junos | Juniper | * | 21.4 (excluding) |
Junos | Juniper | 21.4 (including) | 21.4 (including) |
Junos | Juniper | 21.4-r1 (including) | 21.4-r1 (including) |
Junos | Juniper | 21.4-r1-s1 (including) | 21.4-r1-s1 (including) |
Junos | Juniper | 21.4-r1-s2 (including) | 21.4-r1-s2 (including) |
Junos | Juniper | 21.4-r2 (including) | 21.4-r2 (including) |
Junos | Juniper | 21.4-r2-s1 (including) | 21.4-r2-s1 (including) |
Junos | Juniper | 21.4-r2-s2 (including) | 21.4-r2-s2 (including) |
Junos | Juniper | 21.4-r3 (including) | 21.4-r3 (including) |
Junos | Juniper | 21.4-r3-s1 (including) | 21.4-r3-s1 (including) |
Junos | Juniper | 21.4-r3-s2 (including) | 21.4-r3-s2 (including) |
Junos | Juniper | 21.4-r3-s3 (including) | 21.4-r3-s3 (including) |
Junos | Juniper | 21.4-r3-s4 (including) | 21.4-r3-s4 (including) |
Junos | Juniper | 21.4-r3-s5 (including) | 21.4-r3-s5 (including) |
Junos | Juniper | 21.4-r3-s6 (including) | 21.4-r3-s6 (including) |
Junos | Juniper | 22.1 (including) | 22.1 (including) |
Junos | Juniper | 22.1-r1 (including) | 22.1-r1 (including) |
Junos | Juniper | 22.1-r1-s1 (including) | 22.1-r1-s1 (including) |
Junos | Juniper | 22.1-r1-s2 (including) | 22.1-r1-s2 (including) |
Junos | Juniper | 22.1-r2 (including) | 22.1-r2 (including) |
Junos | Juniper | 22.1-r2-s1 (including) | 22.1-r2-s1 (including) |
Junos | Juniper | 22.1-r2-s2 (including) | 22.1-r2-s2 (including) |
Junos | Juniper | 22.1-r3 (including) | 22.1-r3 (including) |
Junos | Juniper | 22.1-r3-s1 (including) | 22.1-r3-s1 (including) |
Junos | Juniper | 22.1-r3-s2 (including) | 22.1-r3-s2 (including) |
Junos | Juniper | 22.1-r3-s3 (including) | 22.1-r3-s3 (including) |
Junos | Juniper | 22.1-r3-s4 (including) | 22.1-r3-s4 (including) |
Junos | Juniper | 22.1-r3-s5 (including) | 22.1-r3-s5 (including) |
Junos | Juniper | 22.2 (including) | 22.2 (including) |
Junos | Juniper | 22.2-r1 (including) | 22.2-r1 (including) |
Junos | Juniper | 22.2-r1-s1 (including) | 22.2-r1-s1 (including) |
Junos | Juniper | 22.2-r1-s2 (including) | 22.2-r1-s2 (including) |
Junos | Juniper | 22.2-r2 (including) | 22.2-r2 (including) |
Junos | Juniper | 22.2-r2-s1 (including) | 22.2-r2-s1 (including) |
Junos | Juniper | 22.2-r2-s2 (including) | 22.2-r2-s2 (including) |
Junos | Juniper | 22.2-r3 (including) | 22.2-r3 (including) |
Junos | Juniper | 22.2-r3-s1 (including) | 22.2-r3-s1 (including) |
Junos | Juniper | 22.2-r3-s2 (including) | 22.2-r3-s2 (including) |
Junos | Juniper | 22.2-r3-s3 (including) | 22.2-r3-s3 (including) |
Junos | Juniper | 22.3 (including) | 22.3 (including) |
Junos | Juniper | 22.3-r1 (including) | 22.3-r1 (including) |
Junos | Juniper | 22.3-r1-s1 (including) | 22.3-r1-s1 (including) |
Junos | Juniper | 22.3-r1-s2 (including) | 22.3-r1-s2 (including) |
Junos | Juniper | 22.3-r2 (including) | 22.3-r2 (including) |
Junos | Juniper | 22.3-r2-s1 (including) | 22.3-r2-s1 (including) |
Junos | Juniper | 22.3-r2-s2 (including) | 22.3-r2-s2 (including) |
Junos | Juniper | 22.3-r3 (including) | 22.3-r3 (including) |
Junos | Juniper | 22.3-r3-s1 (including) | 22.3-r3-s1 (including) |
Junos | Juniper | 22.3-r3-s2 (including) | 22.3-r3-s2 (including) |
Junos | Juniper | 22.4 (including) | 22.4 (including) |
Junos | Juniper | 22.4-r1 (including) | 22.4-r1 (including) |
Junos | Juniper | 22.4-r1-s1 (including) | 22.4-r1-s1 (including) |
Junos | Juniper | 22.4-r1-s2 (including) | 22.4-r1-s2 (including) |
Junos | Juniper | 22.4-r2 (including) | 22.4-r2 (including) |
Junos | Juniper | 22.4-r2-s1 (including) | 22.4-r2-s1 (including) |
Junos | Juniper | 22.4-r2-s2 (including) | 22.4-r2-s2 (including) |
Junos | Juniper | 22.4-r3 (including) | 22.4-r3 (including) |
Junos | Juniper | 22.4-r3-s1 (including) | 22.4-r3-s1 (including) |
Junos | Juniper | 23.2 (including) | 23.2 (including) |
Junos | Juniper | 23.2-r1 (including) | 23.2-r1 (including) |
Junos | Juniper | 23.2-r1-s1 (including) | 23.2-r1-s1 (including) |
Junos | Juniper | 23.2-r1-s2 (including) | 23.2-r1-s2 (including) |
Junos | Juniper | 23.4 (including) | 23.4 (including) |
Junos | Juniper | 23.4-r1 (including) | 23.4-r1 (including) |
Junos_os_evolved | Juniper | * | 21.4 (excluding) |
Junos_os_evolved | Juniper | 21.4 (including) | 21.4 (including) |
Junos_os_evolved | Juniper | 21.4-r1 (including) | 21.4-r1 (including) |
Junos_os_evolved | Juniper | 21.4-r1-s1 (including) | 21.4-r1-s1 (including) |
Junos_os_evolved | Juniper | 21.4-r1-s2 (including) | 21.4-r1-s2 (including) |
Junos_os_evolved | Juniper | 21.4-r2 (including) | 21.4-r2 (including) |
Junos_os_evolved | Juniper | 21.4-r2-s1 (including) | 21.4-r2-s1 (including) |
Junos_os_evolved | Juniper | 21.4-r2-s2 (including) | 21.4-r2-s2 (including) |
Junos_os_evolved | Juniper | 21.4-r3 (including) | 21.4-r3 (including) |
Junos_os_evolved | Juniper | 21.4-r3-s1 (including) | 21.4-r3-s1 (including) |
Junos_os_evolved | Juniper | 21.4-r3-s2 (including) | 21.4-r3-s2 (including) |
Junos_os_evolved | Juniper | 21.4-r3-s3 (including) | 21.4-r3-s3 (including) |
Junos_os_evolved | Juniper | 21.4-r3-s4 (including) | 21.4-r3-s4 (including) |
Junos_os_evolved | Juniper | 21.4-r3-s5 (including) | 21.4-r3-s5 (including) |
Junos_os_evolved | Juniper | 21.4-r3-s6 (including) | 21.4-r3-s6 (including) |
Junos_os_evolved | Juniper | 22.1 (including) | 22.1 (including) |
Junos_os_evolved | Juniper | 22.1-r1 (including) | 22.1-r1 (including) |
Junos_os_evolved | Juniper | 22.1-r1-s1 (including) | 22.1-r1-s1 (including) |
Junos_os_evolved | Juniper | 22.1-r1-s2 (including) | 22.1-r1-s2 (including) |
Junos_os_evolved | Juniper | 22.1-r2 (including) | 22.1-r2 (including) |
Junos_os_evolved | Juniper | 22.1-r2-s1 (including) | 22.1-r2-s1 (including) |
Junos_os_evolved | Juniper | 22.1-r3 (including) | 22.1-r3 (including) |
Junos_os_evolved | Juniper | 22.1-r3-s1 (including) | 22.1-r3-s1 (including) |
Junos_os_evolved | Juniper | 22.1-r3-s2 (including) | 22.1-r3-s2 (including) |
Junos_os_evolved | Juniper | 22.1-r3-s3 (including) | 22.1-r3-s3 (including) |
Junos_os_evolved | Juniper | 22.1-r3-s4 (including) | 22.1-r3-s4 (including) |
Junos_os_evolved | Juniper | 22.1-r3-s5 (including) | 22.1-r3-s5 (including) |
Junos_os_evolved | Juniper | 22.2 (including) | 22.2 (including) |
Junos_os_evolved | Juniper | 22.2-r1 (including) | 22.2-r1 (including) |
Junos_os_evolved | Juniper | 22.2-r1-s1 (including) | 22.2-r1-s1 (including) |
Junos_os_evolved | Juniper | 22.2-r1-s2 (including) | 22.2-r1-s2 (including) |
Junos_os_evolved | Juniper | 22.2-r2 (including) | 22.2-r2 (including) |
Junos_os_evolved | Juniper | 22.2-r2-s1 (including) | 22.2-r2-s1 (including) |
Junos_os_evolved | Juniper | 22.2-r2-s2 (including) | 22.2-r2-s2 (including) |
Junos_os_evolved | Juniper | 22.2-r3 (including) | 22.2-r3 (including) |
Junos_os_evolved | Juniper | 22.2-r3-s1 (including) | 22.2-r3-s1 (including) |
Junos_os_evolved | Juniper | 22.2-r3-s2 (including) | 22.2-r3-s2 (including) |
Junos_os_evolved | Juniper | 22.2-r3-s3 (including) | 22.2-r3-s3 (including) |
Junos_os_evolved | Juniper | 22.3 (including) | 22.3 (including) |
Junos_os_evolved | Juniper | 22.3-r1 (including) | 22.3-r1 (including) |
Junos_os_evolved | Juniper | 22.3-r1-s1 (including) | 22.3-r1-s1 (including) |
Junos_os_evolved | Juniper | 22.3-r1-s2 (including) | 22.3-r1-s2 (including) |
Junos_os_evolved | Juniper | 22.3-r2 (including) | 22.3-r2 (including) |
Junos_os_evolved | Juniper | 22.3-r2-s1 (including) | 22.3-r2-s1 (including) |
Junos_os_evolved | Juniper | 22.3-r2-s2 (including) | 22.3-r2-s2 (including) |
Junos_os_evolved | Juniper | 22.3-r3 (including) | 22.3-r3 (including) |
Junos_os_evolved | Juniper | 22.3-r3-s1 (including) | 22.3-r3-s1 (including) |
Junos_os_evolved | Juniper | 22.3-r3-s2 (including) | 22.3-r3-s2 (including) |
Junos_os_evolved | Juniper | 22.4 (including) | 22.4 (including) |
Junos_os_evolved | Juniper | 22.4-r1 (including) | 22.4-r1 (including) |
Junos_os_evolved | Juniper | 22.4-r1-s1 (including) | 22.4-r1-s1 (including) |
Junos_os_evolved | Juniper | 22.4-r1-s2 (including) | 22.4-r1-s2 (including) |
Junos_os_evolved | Juniper | 22.4-r2 (including) | 22.4-r2 (including) |
Junos_os_evolved | Juniper | 22.4-r2-s1 (including) | 22.4-r2-s1 (including) |
Junos_os_evolved | Juniper | 22.4-r2-s2 (including) | 22.4-r2-s2 (including) |
Junos_os_evolved | Juniper | 22.4-r3 (including) | 22.4-r3 (including) |
Junos_os_evolved | Juniper | 22.4-r3-s1 (including) | 22.4-r3-s1 (including) |
Junos_os_evolved | Juniper | 23.2 (including) | 23.2 (including) |
Junos_os_evolved | Juniper | 23.2-r1 (including) | 23.2-r1 (including) |
Junos_os_evolved | Juniper | 23.2-r1-s1 (including) | 23.2-r1-s1 (including) |
Junos_os_evolved | Juniper | 23.2-r1-s2 (including) | 23.2-r1-s2 (including) |
Junos_os_evolved | Juniper | 23.4 (including) | 23.4 (including) |
Junos_os_evolved | Juniper | 23.4-r1 (including) | 23.4-r1 (including) |