CVE-2017-10615: Junos: Potential remote code execution vulnerability in PAM
A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10615?
CVE-2017-10615 has a severity rating that indicates potential remote code execution or denial of service.
How do I fix CVE-2017-10615?
To mitigate CVE-2017-10615, upgrade to an unaffected version of Junos OS that addresses this vulnerability.
Which versions of Junos OS are affected by CVE-2017-10615?
CVE-2017-10615 affects Junos OS versions 14.1 and 14.2, including specific maintenance releases.
Can CVE-2017-10615 allow unauthenticated access?
Yes, CVE-2017-10615 may allow an unauthenticated network-based attacker to exploit the vulnerability.
What impact can CVE-2017-10615 have on my network?
CVE-2017-10615 can potentially lead to arbitrary code execution or crash critical daemons in Junos OS.