Use of Externally-Controlled Format String in Juniper Networks Junos OS Evolved

Executive Summary

This vulnerability is a Use of Externally-Controlled Format String issue in the jti-dialoutd component of Juniper Networks Junos OS Evolved. An authenticated network attacker can exploit it to cause a persistent denial of service by sending a crafted analytics sensor resource through the gNMI listener.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves a format string flaw in the jti-dialoutd component of Juniper Networks Junos OS Evolved. Detection requires checking for unusual telemetry dial-out activity or crashes in the jti-dialoutd process. Monitor logs for gNMI listener errors or unexpected sensor resource submissions. Juniper recommends inspecting system logs for dial-out failures or persistent service disruptions.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows an attacker to disrupt telemetry dial-out services, leading to loss of monitoring data and potential network management issues. It requires authentication but can cause persistent denial of service.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows an authenticated attacker to cause persistent denial of service via crafted input, which could disrupt telemetry data collection and reporting. This may impact compliance with standards requiring continuous monitoring and logging, such as GDPR (data integrity) or HIPAA (availability of health data systems).

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest security patches from Juniper Networks for Junos OS Evolved to address the jti-dialoutd format string vulnerability. Disable gNMI listener if not required and restrict access to authenticated users only.

Useful 0 Not Useful 0