Vulnerabilities

there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.<br /> <br />

<br /> An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.<br /> <br /> This issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.<br /> <br /> Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.<br /> This issue affects:<br /> <br /> Juniper Networks Junos OS:<br /> <br /> <br /> <br /> * All versions prior to 20.4R3-S8;<br /> * 21.1 versions 21.1R1 and later;<br /> * 21.2 versions prior to 21.2R3-S6;<br /> * 21.3 versions prior to 21.3R3-S5;<br /> * 21.4 versions prior to 21.4R3-S5;<br /> * 22.1 versions prior to 22.1R3-S4;<br /> * 22.2 versions prior to 22.2R3-S2;<br /> * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;<br /> * 22.4 versions prior to 22.4R2-S1, 22.4R3.<br /> <br /> <br /> <br /> <br /> Juniper Networks Junos OS Evolved<br /> <br /> <br /> <br /> * All versions prior to 20.4R3-S8-EVO;<br /> * 21.1 versions 21.1R1-EVO and later;<br /> * 21.2 versions prior to 21.2R3-S6-EVO;<br /> * 21.3 versions prior to 21.3R3-S5-EVO;<br /> * 21.4 versions prior to 21.4R3-S5-EVO;<br /> * 22.1 versions prior to 22.1R3-S4-EVO;<br /> * 22.2 versions prior to 22.2R3-S2-EVO;<br /> * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;<br /> * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.<br /> <br /> <br /> <br /> <br /> <br /> <br />

An Exposure of Sensitive Information vulnerability in the &amp;#39;file copy&amp;#39; command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system.<br /> <br /> This issue affects Juniper Networks Junos OS Evolved:<br /> * All versions prior to 20.4R3-S7-EVO;<br /> * 21.1 versions 21.1R1-EVO and later;<br /> * 21.2 versions prior to 21.2R3-S5-EVO;<br /> * 21.3 versions prior to 21.3R3-S4-EVO;<br /> * 21.4 versions prior to 21.4R3-S4-EVO;<br /> * 22.1 versions prior to 22.1R3-S2-EVO;<br /> * 22.2 versions prior to 22.2R2-EVO.<br /> <br /> <br />

In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.<br /> <br />

In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.<br /> <br />

In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.<br /> <br />

In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.<br /> <br />

In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.<br /> <br />

In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.<br /> <br />

In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.<br /> <br />

In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.<br /> <br />

In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.<br /> <br />