On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow an malicious user to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to or through the device. This issue affects: Juniper Networks Junos OS on SRX Series: 15.1X49 versions before 15.1X49-D190; 17.4 versions before 17.4R2-S9; 17.4R3 and later versions before 18.1R3-S9; 18.2 versions before 18.2R3-S1; 18.3 versions before 18.3R2-S3, 18.3R3; 18.4 versions before 18.4R2-S3, 18.4R3; 19.1 versions before 19.1R1-S4, 19.1R2; 19.2 versions before 19.2R1-S1, 19.2R2. An indicator of compromise can be the following text in the UTM log: RT_UTM: AV_FILE_NOT_SCANNED_PASSED_MT:
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
juniper junos 15.1x49 |
||
juniper junos 17.4 |
||
juniper junos 18.1 |
||
juniper junos 18.2 |
||
juniper junos 18.3 |
||
juniper junos 18.4 |
||
juniper junos 19.1 |
||
juniper junos 19.2 |
Vulmon