{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T19:56:11.083Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/v1/docs/cve-2021-25220",
               },
               {
                  name: "FEDORA-2022-14e36aac0c",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/",
               },
               {
                  name: "FEDORA-2022-042d9c6146",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/API7U5E7SX7BAAVFNW366FFJGD6NZZKV/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220408-0001/",
               },
               {
                  name: "FEDORA-2022-a88218de5c",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VX3I2U3ICOIEI5Y7OYA6CHOLFMNH3YQ/",
               },
               {
                  name: "FEDORA-2022-05918f0838",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SXT7247QTKNBQ67MNRGZD23ADXU6E5U/",
               },
               {
                  name: "FEDORA-2022-3f293290c3",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DE3UAVCPUMAKG27ZL5YXSP2C3RIOW3JZ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
               },
               {
                  name: "GLSA-202210-25",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-25",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-OS-SRX-Series-Cache-poisoning-vulnerability-in-BIND-used-by-DNS-Proxy-CVE-2021-25220?language=en_US",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "BIND",
               vendor: "ISC",
               versions: [
                  {
                     status: "affected",
                     version: "Open Source Branch 9.11  9.11.0 through versions before 9.11.37",
                  },
                  {
                     status: "affected",
                     version: "Development Branch 9.17  BIND 9.17 all version",
                  },
                  {
                     status: "affected",
                     version: "Open Source Branch 9.12-16  9.12.0 through versions before 9.16.27",
                  },
                  {
                     status: "affected",
                     version: "Open Source Branch 9.18 9.18.0",
                  },
                  {
                     status: "affected",
                     version: "Supported Preview Branch 9.11-S 9.11.0-S through versions before 9.11.37-S",
                  },
                  {
                     status: "affected",
                     version: "Supported Preview Branch 9.16-S  9.16.0-S through versions before 9.16.27-S",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "ISC would like to thank Xiang Li, Baojun Liu, and Chaoyi Lu from Network and Information Security Lab, Tsinghua University and Changgen Zou from Qi An Xin Group Corp. for discovering and reporting this issue.",
            },
         ],
         datePublic: "2022-03-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "CHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "When using forwarders, bogus NS records supplied by, or via, those forwarders may be cached and used by named if it needs to recurse for any reason, causing it to obtain and pass on potentially incorrect answers. Some examples of configurations that will be vulnerable are:     Resolvers using per zone or global forwarding with forward first (forward first is the default).     Resolvers not using global forwarding, but with per-zone forwarding with either forward first (the default) or forward only.     Resolvers configured with global forwarding along with zone statements that disable forwarding for part of the DNS namespace. Authoritative-only BIND 9 servers are not vulnerable to this flaw. BIND     9.11.0 -> 9.11.36     9.12.0 -> 9.16.26     9.17.0 -> 9.18.0 BIND Supported Preview Editions:     9.11.4-S1 -> 9.11.36-S1     9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL.",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-07-23T00:00:00",
            orgId: "404fd4d2-a609-4245-b543-2c944a302a22",
            shortName: "isc",
         },
         references: [
            {
               url: "https://kb.isc.org/v1/docs/cve-2021-25220",
            },
            {
               name: "FEDORA-2022-14e36aac0c",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/",
            },
            {
               name: "FEDORA-2022-042d9c6146",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/API7U5E7SX7BAAVFNW366FFJGD6NZZKV/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20220408-0001/",
            },
            {
               name: "FEDORA-2022-a88218de5c",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VX3I2U3ICOIEI5Y7OYA6CHOLFMNH3YQ/",
            },
            {
               name: "FEDORA-2022-05918f0838",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SXT7247QTKNBQ67MNRGZD23ADXU6E5U/",
            },
            {
               name: "FEDORA-2022-3f293290c3",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DE3UAVCPUMAKG27ZL5YXSP2C3RIOW3JZ/",
            },
            {
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
            },
            {
               name: "GLSA-202210-25",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-25",
            },
            {
               url: "https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-OS-SRX-Series-Cache-poisoning-vulnerability-in-BIND-used-by-DNS-Proxy-CVE-2021-25220?language=en_US",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "Upgrade to the patched release most closely related to your current version of BIND:\n    BIND 9.11.37\n    BIND 9.16.27\n    BIND 9.18.1\nBIND Supported Preview Edition is a special feature preview branch of BIND provided to eligible ISC support customers.\n    BIND 9.11.37-S1\n    BIND 9.16.27-S1",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "DNS forwarders - cache poisoning vulnerability",
         workarounds: [
            {
               lang: "en",
               value: "If applicable, modify your configuration to either remove all forwarding or all possibility of recursion. Depending on your use-case, it may be possible to use other zone types to replace forward zones.\nActive exploits: We are not aware of any active exploits.",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "404fd4d2-a609-4245-b543-2c944a302a22",
      assignerShortName: "isc",
      cveId: "CVE-2021-25220",
      datePublished: "2022-03-23T12:50:10.367480Z",
      dateReserved: "2021-01-15T00:00:00",
      dateUpdated: "2024-09-16T17:08:54.143Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T17:01:09.920Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://supportportal.juniper.net/JSA71636",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:juniper_networks:junos_os:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "junos_os",
                  vendor: "juniper_networks",
                  versions: [
                     {
                        lessThan: "22.2R3",
                        status: "affected",
                        version: "22.2",
                        versionType: "custom",
                     },
                     {
                        lessThan: "22.3R2-S1",
                        status: "affected",
                        version: "22.3",
                        versionType: "custom",
                     },
                     {
                        lessThan: "22.3R3",
                        status: "affected",
                        version: "22.3",
                        versionType: "custom",
                     },
                     {
                        lessThan: "22.4R1-S2",
                        status: "affected",
                        version: "22.4",
                        versionType: "custom",
                     },
                     {
                        lessThan: "22.4R2",
                        status: "affected",
                        version: "22.4",
                        versionType: "custom",
                     },
                     {
                        lessThan: "22.2R2",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-36831",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-07T14:39:03.046485Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-07T14:41:49.644Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               platforms: [
                  "SRX Series",
               ],
               product: "Junos OS",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "22.2R3",
                     status: "affected",
                     version: "22.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.3R2-S1, 22.3R3",
                     status: "affected",
                     version: "22.3",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.4R1-S2, 22.4R2",
                     status: "affected",
                     version: "22.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.2R2",
                     status: "unaffected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "The following sample configuration options highlight the features required to be affected by this issue:<br><tt>&nbsp; set services ssl proxy profile SSL-PROXY protocol-version tls12-and-lower<br>&nbsp; set services ssl proxy profile SSL-PROXY trusted-ca all<br>&nbsp; set services ssl proxy profile SSL-PROXY root-ca ssl-proxy-ecdsa1<br>&nbsp; set security pki ca-profile SECURITY-CA-GROUP_1 ca-identity SECURITY-CA-GROUP_1<br></tt>...<br><tt>&nbsp; set security utm default-configuration web-filtering juniper-enhanced default log-and-permit<br>&nbsp; set security utm feature-profile web-filtering juniper-enhanced profile 2 category ... action block<br></tt>...<br><tt>&nbsp; set security utm utm-policy 1 web-filtering http-profile 2<br></tt>...<br><tt>&nbsp; set security policies from-zone private to-zone internet policy 1 then permit application-services ssl-proxy profile-name SSL-PROXY<br>&nbsp; set security policies from-zone private to-zone internet policy 1 then permit application-services utm-policy 1</tt><br>",
                  },
               ],
               value: "The following sample configuration options highlight the features required to be affected by this issue:\n  set services ssl proxy profile SSL-PROXY protocol-version tls12-and-lower\n  set services ssl proxy profile SSL-PROXY trusted-ca all\n  set services ssl proxy profile SSL-PROXY root-ca ssl-proxy-ecdsa1\n  set security pki ca-profile SECURITY-CA-GROUP_1 ca-identity SECURITY-CA-GROUP_1\n...\n  set security utm default-configuration web-filtering juniper-enhanced default log-and-permit\n  set security utm feature-profile web-filtering juniper-enhanced profile 2 category ... action block\n...\n  set security utm utm-policy 1 web-filtering http-profile 2\n...\n  set security policies from-zone private to-zone internet policy 1 then permit application-services ssl-proxy profile-name SSL-PROXY\n  set security policies from-zone private to-zone internet policy 1 then permit application-services utm-policy 1\n",
            },
         ],
         datePublic: "2023-07-12T16:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition.  Service restoration is only possible by rebooting the system.<br><br>The jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations.  Other products, platforms, and configurations are not affected by this vulnerability.<br><br>This issue affects Juniper Networks Junos OS on SRX Series:<br>22.2 versions prior to 22.2R3;<br>22.3 versions prior to 22.3R2-S1, 22.3R3;<br>22.4 versions prior to 22.4R1-S2, 22.4R2.<br><br>This issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.<br>",
                  },
               ],
               value: "An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service (DoS) condition.  Service restoration is only possible by rebooting the system.\n\nThe jbuf memory leak only occurs in SSL Proxy and UTM Web-Filtering configurations.  Other products, platforms, and configurations are not affected by this vulnerability.\n\nThis issue affects Juniper Networks Junos OS on SRX Series:\n22.2 versions prior to 22.2R3;\n22.3 versions prior to 22.3R2-S1, 22.3R3;\n22.4 versions prior to 22.4R1-S2, 22.4R2.\n\nThis issue does not affect Juniper Networks Junos OS versions prior to 22.2R2.\n",
            },
         ],
         exploits: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.<br>",
                  },
               ],
               value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\n",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-703",
                     description: "CWE-703 Improper Check or Handling of Exceptional Conditions",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     description: "Denial of Service (DoS)",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-07-14T14:56:32.306Z",
            orgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
            shortName: "juniper",
         },
         references: [
            {
               url: "https://supportportal.juniper.net/JSA71636",
            },
         ],
         solutions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "The following software releases have been updated to resolve this specific issue: Junos OS 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.1R1, and all subsequent releases.<br>",
                  },
               ],
               value: "The following software releases have been updated to resolve this specific issue: Junos OS 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.1R1, and all subsequent releases.\n",
            },
         ],
         source: {
            defect: [
               "1709031",
            ],
            discovery: "USER",
         },
         title: "Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied",
         workarounds: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "There are no known workarounds for this issue.<br>",
                  },
               ],
               value: "There are no known workarounds for this issue.\n",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
      assignerShortName: "juniper",
      cveId: "CVE-2023-36831",
      datePublished: "2023-07-14T14:56:32.306Z",
      dateReserved: "2023-06-27T16:17:25.275Z",
      dateUpdated: "2024-11-07T14:41:49.644Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T09:54:03.563Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/embedthis/appweb/commit/66067ae6d1fa08b37a270e7dc1821df52ed2daef",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/embedthis/appweb/issues/605",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/embedthis/goahead/issues/264",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://supportportal.juniper.net/s/article/2019-07-Security-Bulletin-Junos-OS-J-Web-Denial-of-Service-due-to-multiple-vulnerabilities-in-Embedthis-Appweb-Server",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-08-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-06-13T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://github.com/embedthis/appweb/commit/66067ae6d1fa08b37a270e7dc1821df52ed2daef",
            },
            {
               url: "https://github.com/embedthis/appweb/issues/605",
            },
            {
               url: "https://github.com/embedthis/goahead/issues/264",
            },
            {
               url: "https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved",
            },
            {
               url: "https://supportportal.juniper.net/s/article/2019-07-Security-Bulletin-Junos-OS-J-Web-Denial-of-Service-due-to-multiple-vulnerabilities-in-Embedthis-Appweb-Server",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-15504",
      datePublished: "2018-08-18T00:00:00",
      dateReserved: "2018-08-17T00:00:00",
      dateUpdated: "2024-08-05T09:54:03.563Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T03:07:49.592Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.juniper.net/JSA11261",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "SRX Series, MX Series with SPC3",
               ],
               product: "Junos OS",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "18.2R3",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "18.3R3",
                     status: "affected",
                     version: "18.3",
                     versionType: "custom",
                  },
                  {
                     lessThan: "18.4R2-S9, 18.4R3",
                     status: "affected",
                     version: "18.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "19.1R2",
                     status: "affected",
                     version: "19.1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "19.2R1-S1, 19.2R2",
                     status: "affected",
                     version: "19.2",
                     versionType: "custom",
                  },
               ],
            },
         ],
         datePublic: "2022-01-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 allows an unauthenticated network attacker to cause latency in transit packet processing and even packet loss. If transit traffic includes a significant percentage (> 5%) of fragmented packets which need to be reassembled, high latency or packet drops might be observed. This issue affects Juniper Networks Junos OS on SRX Series, MX Series with SPC3: All versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2-S9, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-407",
                     description: "CWE-407 Algorithmic Complexity",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     description: "Denial of Service (DoS)",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-770",
                     description: "CWE-770 Allocation of Resources Without Limits or Throttling",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-01-19T00:20:54",
            orgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
            shortName: "juniper",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.juniper.net/JSA11261",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "The following software releases have been updated to resolve this specific issue: 18.2R3, 18.3R3, 18.4R2-S9, 18.4R3, 19.1R2, 19.2R1-S1, 19.2R2, 19.3R1, and all subsequent releases.",
            },
         ],
         source: {
            advisory: "JSA11261",
            defect: [
               "1406465",
            ],
            discovery: "USER",
         },
         title: "SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops",
         workarounds: [
            {
               lang: "en",
               value: "There are no viable workarounds for this issue.",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "sirt@juniper.net",
               DATE_PUBLIC: "2022-01-12T17:00:00.000Z",
               ID: "CVE-2022-22153",
               STATE: "PUBLIC",
               TITLE: "SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Junos OS",
                                 version: {
                                    version_data: [
                                       {
                                          platform: "SRX Series, MX Series with SPC3",
                                          version_affected: "<",
                                          version_value: "18.2R3",
                                       },
                                       {
                                          platform: "SRX Series, MX Series with SPC3",
                                          version_affected: "<",
                                          version_name: "18.3",
                                          version_value: "18.3R3",
                                       },
                                       {
                                          platform: "SRX Series, MX Series with SPC3",
                                          version_affected: "<",
                                          version_name: "18.4",
                                          version_value: "18.4R2-S9, 18.4R3",
                                       },
                                       {
                                          platform: "SRX Series, MX Series with SPC3",
                                          version_affected: "<",
                                          version_name: "19.1",
                                          version_value: "19.1R2",
                                       },
                                       {
                                          platform: "SRX Series, MX Series with SPC3",
                                          version_affected: "<",
                                          version_name: "19.2",
                                          version_value: "19.2R1-S1, 19.2R2",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Juniper Networks",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 allows an unauthenticated network attacker to cause latency in transit packet processing and even packet loss. If transit traffic includes a significant percentage (> 5%) of fragmented packets which need to be reassembled, high latency or packet drops might be observed. This issue affects Juniper Networks Junos OS on SRX Series, MX Series with SPC3: All versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2-S9, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2.",
                  },
               ],
            },
            exploit: [
               {
                  lang: "en",
                  value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
               },
            ],
            generator: {
               engine: "Vulnogram 0.0.9",
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-407 Algorithmic Complexity",
                        },
                     ],
                  },
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Denial of Service (DoS)",
                        },
                     ],
                  },
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-770 Allocation of Resources Without Limits or Throttling",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://kb.juniper.net/JSA11261",
                     refsource: "CONFIRM",
                     url: "https://kb.juniper.net/JSA11261",
                  },
               ],
            },
            solution: [
               {
                  lang: "en",
                  value: "The following software releases have been updated to resolve this specific issue: 18.2R3, 18.3R3, 18.4R2-S9, 18.4R3, 19.1R2, 19.2R1-S1, 19.2R2, 19.3R1, and all subsequent releases.",
               },
            ],
            source: {
               advisory: "JSA11261",
               defect: [
                  "1406465",
               ],
               discovery: "USER",
            },
            work_around: [
               {
                  lang: "en",
                  value: "There are no viable workarounds for this issue.",
               },
            ],
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
      assignerShortName: "juniper",
      cveId: "CVE-2022-22153",
      datePublished: "2022-01-19T00:20:54.857159Z",
      dateReserved: "2021-12-21T00:00:00",
      dateUpdated: "2024-09-17T01:50:42.071Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T13:51:38.825Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://supportportal.juniper.net/JSA70592",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.juniper.net/documentation/us/en/software/jdpi/release-notes/jdpi-decoder-release-notes-october-2022/jdpi-decoder-release-notes-october-2022.pdf",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://supportportal.juniper.net/s/article/SRX-How-to-update-IDP-signature-database-automatically-on-a-SRX",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-28968",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-06T14:37:20.686353Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-06T14:37:27.516Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "SRX Series",
               ],
               product: " Junos OS",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "19.1R3-S10",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "19.2R3-S7",
                     status: "affected",
                     version: "19.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "19.3R3-S8",
                     status: "affected",
                     version: "19.3",
                     versionType: "custom",
                  },
                  {
                     lessThan: "19.4R3-S11",
                     status: "affected",
                     version: "19.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "20.1*",
                     status: "affected",
                     version: "20.1R1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "20.2R3-S7",
                     status: "affected",
                     version: "20.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "20.3*",
                     status: "affected",
                     version: "20.3R1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "20.4R3-S6",
                     status: "affected",
                     version: "20.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.1R3-S5",
                     status: "affected",
                     version: "21.1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.2R3-S4",
                     status: "affected",
                     version: "21.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.3R3-S3",
                     status: "affected",
                     version: "21.3",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.4R3-S3",
                     status: "affected",
                     version: "21.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.1R3-S1",
                     status: "affected",
                     version: "22.1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.2R2-S1, 22.2R3",
                     status: "affected",
                     version: "22.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.3R2",
                     status: "affected",
                     version: "22.3",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "SRX Series",
               ],
               product: "AppID Service Sigpack",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "1.550.2-31",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
            {
               platforms: [
                  "SRX Series",
               ],
               product: "JDPI-Decoder Engine",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "5.7.0-47",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "\nFor this issue, Security Policy with dynamic application must be configured:\n \n  [security zones security-zone trust]\n  [security zones security-zone untrust]\n  [security policies from-zone “zone” to-zone “zone” policy “policy” match source-address “address”]\n  [security policies from-zone “zone” to-zone “zone” policy “policy” match destination-address “address”]\n  [security policies from-zone “zone” to-zone “zone” policy “policy” match dynamic-application “application”]\n  [security policies from-zone “zone” to-zone “zone” policy “policy” then “action”]",
            },
         ],
         datePublic: "2023-04-12T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowing an unauthenticated network-based attacker to send traffic to the target device using the JDPI-Decoder, designed to inspect dynamic application traffic and take action upon this traffic, to instead begin to not take action and to pass the traffic through. An example session can be seen by running the following command and evaluating the output. user@device# run show security flow session source-prefix <address/mask> extensive Session ID: <session ID>, Status: Normal, State: Active Policy name: <name of policy> Dynamic application: junos:UNKNOWN, <<<<< LOOK HERE Please note, the JDPI-Decoder and the AppID SigPack are both affected and both must be upgraded along with the operating system to address the matter. By default, none of this is auto-enabled for automatic updates. This issue affects: Juniper Networks any version of the JDPI-Decoder Engine prior to version 5.7.0-47 with the JDPI-Decoder enabled using any version of the AppID SigPack prior to version 1.550.2-31 (SigPack 3533) on Junos OS on SRX Series: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2;",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1325",
                     description: "CWE-1325: Improperly Controlled Sequential Memory Allocation",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-04-17T00:00:00.000Z",
            orgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
            shortName: "juniper",
         },
         references: [
            {
               url: "https://supportportal.juniper.net/JSA70592",
            },
            {
               url: "https://www.juniper.net/documentation/us/en/software/jdpi/release-notes/jdpi-decoder-release-notes-october-2022/jdpi-decoder-release-notes-october-2022.pdf",
            },
            {
               url: "https://supportportal.juniper.net/s/article/SRX-How-to-update-IDP-signature-database-automatically-on-a-SRX",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "The following software releases have been updated to resolve this specific issue: 19.4R3-S11, 20.2R3-S7, 20.4R3-S6, 21.1R3-S5, 21.2R3-S4, 21.3R3-S3, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1, and all subsequent releases.\nPlease note: Prior to Junos OS: 21.2R3-S4, 21.3R3-S3, 21.3R3-S3, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R2, 22.4R1, and all subsequent releases SOF is incorrectly offloading short-lived flows leading to early exhaustion of NP memory, reducing overall device performance.  Customers should review PRSearch PR1692100 for such details in conjunction with this advisory.\n\n\nCustomers may choose to enable automatic updates for IDP or manually update the IDP security package to receive the fixes. \n\nTo manually download the IDP signatures: \na. Download the IDP security-package on the device:\n  request security idp security-package download\nb. Check the status of the download:\n  request security idp security-package download status\nc. Install the IDP security-package on the device:\n  request security idp security-package install\nd. Check the status of the installation:\n  request security idp security-package install status\n\nTo enabled automatic update review the instuctions located at: https://supportportal.juniper.net/s/article/SRX-How-to-update-IDP-signature-database-automatically-on-a-SRX\n\n== When using AppID only:\n \n  request services application-identification download\n  request services application-identification download status\n  request services application-identification install\n  request services application-identification install status\n \nOr enable auto-update for AppID:\n \n  [edit]\n  user# set services application-identification download automatic ?\n  Possible completions:\n    interval             Attempt to download new application package (hours)\n    start-time           Start time(MM-DD.hh:mm / YYYY-MM-DD.hh:mm:ss)\n \nNote: This updated signature package is not compatible with v4 engines.\n\n\n",
            },
         ],
         source: {
            advisory: "JSA70592",
            defect: [
               "1694222",
            ],
            discovery: "USER",
         },
         title: "Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open",
         workarounds: [
            {
               lang: "en",
               value: "There are no known workarounds for this issue other than disabling the AppID service.\n\nAdditionally, a reboot will temporarily clear the problem until such time that updates can be taken. How long this lasts depends on the customer's network environment and the device being affected.\n\n\n",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
      assignerShortName: "juniper",
      cveId: "CVE-2023-28968",
      datePublished: "2023-04-17T00:00:00.000Z",
      dateReserved: "2023-03-29T00:00:00.000Z",
      dateUpdated: "2025-02-06T14:37:27.516Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T03:07:50.113Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.juniper.net/JSA69710",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "SRX Series",
               ],
               product: "Junos OS",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "20.2R3-S4",
                     status: "affected",
                     version: "20.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "20.3R3-S3",
                     status: "affected",
                     version: "20.3",
                     versionType: "custom",
                  },
                  {
                     lessThan: "20.4R3-S3",
                     status: "affected",
                     version: "20.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.1R3-S1",
                     status: "affected",
                     version: "21.1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.2R2-S2, 21.2R3",
                     status: "affected",
                     version: "21.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.3R2",
                     status: "affected",
                     version: "21.3",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.4R2",
                     status: "affected",
                     version: "21.4",
                     versionType: "custom",
                  },
               ],
            },
            {
               product: "Junos OS",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "20.2R1",
                     status: "unaffected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         datePublic: "2022-07-13T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS). The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search feature of UTM (Unified Threat management). Continued receipt of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS: 20.2 versions prior to 20.2R3-S4 on SRX Series; 20.3 versions prior to 20.3R3-S3 on SRX Series; 20.4 versions prior to 20.4R3-S3 on SRX Series; 21.1 versions prior to 21.1R3-S1 on SRX Series; 21.2 versions prior to 21.2R2-S2, 21.2R3 on SRX Series; 21.3 versions prior to 21.3R2 on SRX Series; 21.4 versions prior to 21.4R2 on SRX Series. This issue does not affect Juniper Networks Junos OS versions prior to 20.2R1.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Denial of Service (DoS)",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-120",
                     description: "CWE-120 Buffer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-07-20T14:13:41",
            orgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
            shortName: "juniper",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.juniper.net/JSA69710",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "The following software releases have been updated to resolve this specific issue: 20.2R3-S4, 20.3R3-S3, 20.4R3-S3, 21.1R3-S1, 21.2R2-S2, 21.2R3, 21.3R2, 21.4R2, 22.1R1, and all subsequent releases.\n\nNote: Only those releases listed in the PROBLEM section above are affected. This fix has also been proactively committed into other releases that are not vulnerable to this issue.",
            },
         ],
         source: {
            advisory: "JSA69710",
            defect: [
               "1594638",
            ],
            discovery: "USER",
         },
         title: "Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search",
         workarounds: [
            {
               lang: "en",
               value: "Disable UTM EWF safe-search by adding the no-safe-search config. Example:\n  set security utm default-configuration web-filtering juniper-enhanced no-safe-search \n  set security utm feature-profile web-filtering juniper-enhanced profile test-profile no-safe-search",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "sirt@juniper.net",
               DATE_PUBLIC: "2022-07-13T16:00:00.000Z",
               ID: "CVE-2022-22206",
               STATE: "PUBLIC",
               TITLE: "Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Junos OS",
                                 version: {
                                    version_data: [
                                       {
                                          platform: "SRX Series",
                                          version_affected: "<",
                                          version_name: "20.2",
                                          version_value: "20.2R3-S4",
                                       },
                                       {
                                          platform: "SRX Series",
                                          version_affected: "<",
                                          version_name: "20.3",
                                          version_value: "20.3R3-S3",
                                       },
                                       {
                                          platform: "SRX Series",
                                          version_affected: "<",
                                          version_name: "20.4",
                                          version_value: "20.4R3-S3",
                                       },
                                       {
                                          platform: "SRX Series",
                                          version_affected: "<",
                                          version_name: "21.1",
                                          version_value: "21.1R3-S1",
                                       },
                                       {
                                          platform: "SRX Series",
                                          version_affected: "<",
                                          version_name: "21.2",
                                          version_value: "21.2R2-S2, 21.2R3",
                                       },
                                       {
                                          platform: "SRX Series",
                                          version_affected: "<",
                                          version_name: "21.3",
                                          version_value: "21.3R2",
                                       },
                                       {
                                          platform: "SRX Series",
                                          version_affected: "<",
                                          version_name: "21.4",
                                          version_value: "21.4R2",
                                       },
                                       {
                                          version_affected: "!<",
                                          version_value: "20.2R1",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Juniper Networks",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS). The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search feature of UTM (Unified Threat management). Continued receipt of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS: 20.2 versions prior to 20.2R3-S4 on SRX Series; 20.3 versions prior to 20.3R3-S3 on SRX Series; 20.4 versions prior to 20.4R3-S3 on SRX Series; 21.1 versions prior to 21.1R3-S1 on SRX Series; 21.2 versions prior to 21.2R2-S2, 21.2R3 on SRX Series; 21.3 versions prior to 21.3R2 on SRX Series; 21.4 versions prior to 21.4R2 on SRX Series. This issue does not affect Juniper Networks Junos OS versions prior to 20.2R1.",
                  },
               ],
            },
            exploit: [
               {
                  lang: "en",
                  value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
               },
            ],
            generator: {
               engine: "Vulnogram 0.0.9",
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Denial of Service (DoS)",
                        },
                     ],
                  },
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-120 Buffer Overflow",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://kb.juniper.net/JSA69710",
                     refsource: "CONFIRM",
                     url: "https://kb.juniper.net/JSA69710",
                  },
               ],
            },
            solution: [
               {
                  lang: "en",
                  value: "The following software releases have been updated to resolve this specific issue: 20.2R3-S4, 20.3R3-S3, 20.4R3-S3, 21.1R3-S1, 21.2R2-S2, 21.2R3, 21.3R2, 21.4R2, 22.1R1, and all subsequent releases.\n\nNote: Only those releases listed in the PROBLEM section above are affected. This fix has also been proactively committed into other releases that are not vulnerable to this issue.",
               },
            ],
            source: {
               advisory: "JSA69710",
               defect: [
                  "1594638",
               ],
               discovery: "USER",
            },
            work_around: [
               {
                  lang: "en",
                  value: "Disable UTM EWF safe-search by adding the no-safe-search config. Example:\n  set security utm default-configuration web-filtering juniper-enhanced no-safe-search \n  set security utm feature-profile web-filtering juniper-enhanced profile test-profile no-safe-search",
               },
            ],
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
      assignerShortName: "juniper",
      cveId: "CVE-2022-22206",
      datePublished: "2022-07-20T14:13:41.390836Z",
      dateReserved: "2021-12-21T00:00:00",
      dateUpdated: "2024-09-16T18:08:32.626Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T10:07:06.537Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://kb.juniper.net/JSA70212",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-22416",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-04-08T16:48:36.598429Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-04-08T16:48:51.747Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               platforms: [
                  "MX Series, SRX Series",
               ],
               product: "Junos OS",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "20.4R1",
                     status: "unaffected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "20.4R3-S5",
                     status: "affected",
                     version: "20.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.1R3-S4",
                     status: "affected",
                     version: "21.1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.2R3-S2",
                     status: "affected",
                     version: "21.2",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.3R3-S1",
                     status: "affected",
                     version: "21.3",
                     versionType: "custom",
                  },
                  {
                     lessThan: "21.4R3",
                     status: "affected",
                     version: "21.4",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.1R1-S2, 22.1R2",
                     status: "affected",
                     version: "22.1",
                     versionType: "custom",
                  },
                  {
                     lessThan: "22.2R1-S1, 22.2R2",
                     status: "affected",
                     version: "22.2",
                     versionType: "custom",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration.\n\nPlease verify on SRX with:\n\n  user@host> show security alg status | match sip\n  SIP : Enabled\n\nPlease verify on MX whether the following is configured:\n\n  [services ... rule <rule-name> (term <term-name> ) from/match application/application-set <name>]\nwhere either\n  a. name = junos-sip\nor an application or application-set refers to SIP:\n  b. [applications application <name> application-protocol sip]\nor\n  c. [applications application-set <name> application junos-sip]",
            },
         ],
         datePublic: "2023-01-11T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SRX Series platform with SIP ALG enabled, when a malformed SIP packet is received, the flow processing daemon (flowd) will crash and restart. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2; 22.2 versions prior to 22.2R1-S1, 22.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1 on SRX Series.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-120",
                     description: "CWE-120 Buffer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     description: "Denial of Service (DoS)",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-01-12T00:00:00.000Z",
            orgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
            shortName: "juniper",
         },
         references: [
            {
               url: "https://kb.juniper.net/JSA70212",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "The following software releases have been updated to resolve this specific issue: 20.4R3-S5, 21.1R3-S4, 21.2R3-S2, 21.3R3-S1, 21.4R3, 22.1R1-S2, 22.1R2, 22.2R1-S1, 22.2R2, 22.3R1, and all subsequent releases.\n",
            },
         ],
         source: {
            advisory: "JSA70212",
            defect: [
               "1668830",
            ],
            discovery: "USER",
         },
         title: "Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received",
         workarounds: [
            {
               lang: "en",
               value: "There are no known workarounds for this issue, but it should be considered to disable the SIP ALG if it's not strictly needed.",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
      assignerShortName: "juniper",
      cveId: "CVE-2023-22416",
      datePublished: "2023-01-12T00:00:00.000Z",
      dateReserved: "2022-12-27T00:00:00.000Z",
      dateUpdated: "2025-04-08T16:48:51.747Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2016-1285",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-23T17:28:36.470367Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-23T17:28:43.535Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T22:48:13.763Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
               },
               {
                  name: "FEDORA-2016-5047abe4a9",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html",
               },
               {
                  name: "DSA-3511",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3511",
               },
               {
                  name: "SUSE-SU-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html",
               },
               {
                  name: "FreeBSD-SA-16:13",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/article/AA-01438",
               },
               {
                  name: "USN-2925-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2925-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/article/AA-01352",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
               },
               {
                  name: "RHSA-2016:0562",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0562.html",
               },
               {
                  name: "openSUSE-SU-2016:0830",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html",
               },
               {
                  name: "GLSA-201610-07",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201610-07",
               },
               {
                  name: "1035236",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1035236",
               },
               {
                  name: "SUSE-SU-2016:1541",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html",
               },
               {
                  name: "FEDORA-2016-364c0a9df4",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html",
               },
               {
                  name: "openSUSE-SU-2016:0834",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html",
               },
               {
                  name: "HPSBUX03583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=146191105921542&w=2",
               },
               {
                  name: "SUSE-SU-2016:0759",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/article/AA-01380",
               },
               {
                  name: "FEDORA-2016-dce6dbe6a8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html",
               },
               {
                  name: "FEDORA-2016-b593e84223",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  name: "SUSE-SU-2016:0825",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html",
               },
               {
                  name: "RHSA-2016:0601",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0601.html",
               },
               {
                  name: "SSRT110084",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=146191105921542&w=2",
               },
               {
                  name: "openSUSE-SU-2016:0859",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html",
               },
               {
                  name: "FEDORA-2016-161b73fc2c",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html",
               },
               {
                  name: "openSUSE-SU-2016:0827",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html",
               },
               {
                  name: "FEDORA-2016-75f31fbb0a",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-03-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-20T15:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
            },
            {
               name: "FEDORA-2016-5047abe4a9",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html",
            },
            {
               name: "DSA-3511",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3511",
            },
            {
               name: "SUSE-SU-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html",
            },
            {
               name: "FreeBSD-SA-16:13",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.isc.org/article/AA-01438",
            },
            {
               name: "USN-2925-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2925-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.isc.org/article/AA-01352",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
            },
            {
               name: "RHSA-2016:0562",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0562.html",
            },
            {
               name: "openSUSE-SU-2016:0830",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html",
            },
            {
               name: "GLSA-201610-07",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201610-07",
            },
            {
               name: "1035236",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1035236",
            },
            {
               name: "SUSE-SU-2016:1541",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html",
            },
            {
               name: "FEDORA-2016-364c0a9df4",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html",
            },
            {
               name: "openSUSE-SU-2016:0834",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html",
            },
            {
               name: "HPSBUX03583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=146191105921542&w=2",
            },
            {
               name: "SUSE-SU-2016:0759",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.isc.org/article/AA-01380",
            },
            {
               name: "FEDORA-2016-dce6dbe6a8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html",
            },
            {
               name: "FEDORA-2016-b593e84223",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               name: "SUSE-SU-2016:0825",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html",
            },
            {
               name: "RHSA-2016:0601",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0601.html",
            },
            {
               name: "SSRT110084",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=146191105921542&w=2",
            },
            {
               name: "openSUSE-SU-2016:0859",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html",
            },
            {
               name: "FEDORA-2016-161b73fc2c",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html",
            },
            {
               name: "openSUSE-SU-2016:0827",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html",
            },
            {
               name: "FEDORA-2016-75f31fbb0a",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-1285",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
                  },
                  {
                     name: "FEDORA-2016-5047abe4a9",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178880.html",
                  },
                  {
                     name: "DSA-3511",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3511",
                  },
                  {
                     name: "SUSE-SU-2016:0780",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00053.html",
                  },
                  {
                     name: "FreeBSD-SA-16:13",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:13.bind.asc",
                  },
                  {
                     name: "https://kb.isc.org/article/AA-01438",
                     refsource: "CONFIRM",
                     url: "https://kb.isc.org/article/AA-01438",
                  },
                  {
                     name: "USN-2925-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2925-1",
                  },
                  {
                     name: "https://kb.isc.org/article/AA-01352",
                     refsource: "CONFIRM",
                     url: "https://kb.isc.org/article/AA-01352",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
                  },
                  {
                     name: "RHSA-2016:0562",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0562.html",
                  },
                  {
                     name: "openSUSE-SU-2016:0830",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00075.html",
                  },
                  {
                     name: "GLSA-201610-07",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201610-07",
                  },
                  {
                     name: "1035236",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1035236",
                  },
                  {
                     name: "SUSE-SU-2016:1541",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00013.html",
                  },
                  {
                     name: "FEDORA-2016-364c0a9df4",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html",
                  },
                  {
                     name: "openSUSE-SU-2016:0834",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00079.html",
                  },
                  {
                     name: "HPSBUX03583",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=146191105921542&w=2",
                  },
                  {
                     name: "SUSE-SU-2016:0759",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00046.html",
                  },
                  {
                     name: "https://kb.isc.org/article/AA-01380",
                     refsource: "CONFIRM",
                     url: "https://kb.isc.org/article/AA-01380",
                  },
                  {
                     name: "FEDORA-2016-dce6dbe6a8",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179911.html",
                  },
                  {
                     name: "FEDORA-2016-b593e84223",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05087821",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                  },
                  {
                     name: "SUSE-SU-2016:0825",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00070.html",
                  },
                  {
                     name: "RHSA-2016:0601",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0601.html",
                  },
                  {
                     name: "SSRT110084",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=146191105921542&w=2",
                  },
                  {
                     name: "openSUSE-SU-2016:0859",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00084.html",
                  },
                  {
                     name: "FEDORA-2016-161b73fc2c",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181037.html",
                  },
                  {
                     name: "openSUSE-SU-2016:0827",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00072.html",
                  },
                  {
                     name: "FEDORA-2016-75f31fbb0a",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-1285",
      datePublished: "2016-03-09T23:00:00",
      dateReserved: "2016-01-04T00:00:00",
      dateUpdated: "2024-08-05T22:48:13.763Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}