Out-of-bounds Write in Juniper Networks Junos OS SRX Series

Executive Summary

This vulnerability is an Out-of-bounds Write in the http-gatekeeper (http-gk) component of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated attacker on the network to send specially crafted requests that cause the http-gk process to crash.

The crash occurs when the device is configured for remote-access VPN with pre-logon compliance check enabled. The out-of-bounds write leads to a denial of service by making services dependent on the system services web-management configuration unavailable until the process restarts.

Useful 0 Not Useful 0

Impact Analysis

The primary impact of this vulnerability is a Denial-of-Service (DoS) condition. An attacker can cause the http-gk process to crash, which results in the unavailability of critical services such as J-Web, remote access VPN, and firewall authentication.

These services remain unavailable until the http-gk process automatically restarts, potentially disrupting network management and remote access capabilities.

Useful 0 Not Useful 0