SB2024071521 - Privilege escalation in Junos OS and Junos OS Evolved CLI

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024071521

SB2024071521 - Privilege escalation in Junos OS and Junos OS Evolved CLI

Published: July 15, 2024

Security Bulletin ID SB2024071521
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Stack-based buffer overflow (CVE-ID: CVE-2024-39556)

The vulnerability allows a local privileged user to execute arbitrary code.

A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI the ability to load a malicious certificate file, leading to a limited Denial of Service (DoS) or privileged code execution.

By exploiting the 'set security certificates' command with a crafted certificate file, a malicious attacker with access to the CLI could cause a crash of the command management daemon (mgd), limited to the local user's command interpreter, or potentially trigger a stack-based buffer overflow.


Remediation

Install update from vendor's website.

References