Stack-based Buffer Overflow in Juniper Junos OS DHCPv4 Local-Client

Executive Summary

This is a stack-based buffer overflow in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the jdhcpd process when handling malformed DHCPv4 server responses. An adjacent unauthenticated attacker could exploit this to cause a denial of service or execute arbitrary code with root privileges if the DHCPv4 local-client feature is enabled.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring the jdhcpd process for crashes or unusual behavior when DHCPv4 local-client feature is enabled. Check logs for DHCP server responses causing stack overflows. Juniper recommends inspecting network traffic for malformed DHCPv4 packets targeting affected systems.

Useful 0 Not Useful 0

Impact Analysis

An attacker on the same network could crash your system or take full control of it, leading to service disruption or complete system compromise. This could expose sensitive data, allow unauthorized access, or disrupt network operations.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows remote code execution with root privileges, which could lead to unauthorized access to sensitive data. This may violate compliance requirements for GDPR (data protection) and HIPAA (healthcare data security) by enabling data breaches or unauthorized disclosure.

Useful 0 Not Useful 0

Mitigation Strategies

Disable the DHCPv4 local-client feature on affected Juniper Networks Junos OS or Junos OS Evolved devices to prevent exploitation. Apply patches or updates from Juniper Networks as soon as they become available.

Useful 0 Not Useful 0