Skip to main content

Northstar Controller CVE-2017-2316

MEDIUM
Buffer Overflow (CWE-119)
2017-04-24 sirt@juniper.net
6.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 24, 2017 - 15:59 cve.org
MEDIUM 6.5

DescriptionCVE.org

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service.

AnalysisAI

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service. Affected products include: Juniper Northstar Controller. Version information: version 2.1.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

CVE-2017-2320 CRITICAL
10.0 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2332 HIGH
8.8 Apr 24

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

CVE-2017-2321 HIGH
8.6 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2317 HIGH
8.6 Apr 24

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2319 HIGH
8.3 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a m

CVE-2017-2323 HIGH
7.5 Apr 24

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2334 HIGH
7.5 Apr 24

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2331 HIGH
7.3 Apr 24

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

CVE-2017-2325 MEDIUM
6.5 Apr 24

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

CVE-2017-2333 MEDIUM
6.5 Apr 24

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

CVE-2017-2318 MEDIUM
6.5 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2326 MEDIUM
6.5 Apr 24

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Serv

Share

CVE-2017-2316 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy