VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 13, 2017· Updated Jun 17, 2026

CVE-2017-10615

CVE-2017-10615

Description

A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.

Affected products

31
  • Juniper Networks/Junos31 versions
    cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*+ 30 more
    • cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*
    • (no CPE)range: 14.1R5 before 14.1R8-S4, 14.1R9; 14.1X53 before 14.1X53-D50 on EX and QFX series; 14.2R3 before 14.2R7-S8, 14.2R8
    • (no CPE)range: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.