CVE-2015-0235 GHOST Vulnerability Impact on Juniper Products and Patch Guide

Critical Vulnerability Information Vulnerability Name: GHOST glibc gethostbyname() buffer overflow vulnerability (CVE-2015-0235) CVE ID: CVE-2015-0235 Severity: High CVSS Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) Affected Products Junos Space CTPView CTP IDP-SA SRC NSM Appliance JSA and STRM Series Media Flow Controller (MFC) and Application Delivery Controller (ADC) Unaffected Products Junos NetScreen ISG/SSG firewalls JUNOS NSM Server SBR Carrier WX/WXC Series WLA Wireless LAN Access Point WLC Wireless LAN Controller WLM Wireless LAN Management Appliance RingMaster SmartPass Remediation Junos Space: A Junos Space hot-patch has been released to address this vulnerability. IDP-SA: PR 1060071 resolves the issue. Other Products: Specific resolved versions or update instructions are provided. Exploitation Mechanism and Risk This vulnerability allows attackers to remotely gain complete control of affected systems without requiring system credentials. The flaw resides in the Linux glibc library and impacts multiple Juniper products and services. Patches and Updates Describes the patch installation procedure for Junos Space and important considerations, emphasizing that the patch must be installed before upgrading to any release version including 14.1R2. Provides detailed software update steps and links to related resources. Additional Information Includes links to Qualys’s blog and other related CVEs and documentation for further research.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2015-0235 GHOST Vulnerability Impact on Juniper Products and Patch Guide