CISA urges to fix multiple critical flaws in Juniper Networks products

CISA urges admins to apply recently released fixes in Juniper Networks products, including Junos Space, Contrail Networking and NorthStar Controller.

CISA urges users and administrators to review the Juniper Networks security advisories page and apply security updates available for some products, including Junos Space, Contrail Networking and NorthStar Controller.

Threat actors can exploit some of these vulnerabilities to take over the affected system.

“Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.” reads the CISA’s advisory. “CISA encourages users and administrators to review the Juniper Networks security advisories page and apply the necessary updates.”

The vendor addressed 31 critical vulnerabilities in Junos Space, the issues reside in multiple third-party products including nginx resolver, Oracle Java SE, OpenSSH, Samba, the RPM package manager, Kerberos, OpenSSL, the Linux kernel, curl, and MySQL Server.

The most severe flaw, tracked as CVE-2021-23017 (CVSS score 9.4) affects nginx resolver and can allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

The vendor also addressed multiple known vulnerabilities in CentOS 6.8, shipped with Junos Space Policy Enforcer prior to version 22.1R1.

“Policy Enforcer is a component of the Junos Space Security Director user interface, integrated with Sky ATP to provide centralized threat management and monitoring for software-defined secure networks.” reads the advisory. “These issues affect all versions of Juniper Networks Junos Space Policy Enforcer prior to 22.1R1.”

Juniper also fixed multiple critical vulnerabilities in Contrail Networking 21.4, some of them date back 2013. Multiple integer overflows in libgfortran, collectively tracked as CVE-2014-5044, can be exploited by remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.

Juniper also addressed a remote code execution issue, tracked as CVE-2021-23017, that affects its NorthStar Controller product and received a 9.4 CVSS score.

Remote attackers can trigger the issue to cause worker process crash or potentially, arbitrary code execution.

The good news is that Juniper SIRT is not aware of any malicious exploitation of the above issues.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, Juniper Networks)

[adrotate banner=”5″]

[adrotate banner=”13″]