GCVE-110-NCSC-2024-290

Weaknesses (CWE)

CWE-755Improper Handling of Exceptional ConditionsCWE-754Improper Check for Unusual or Exceptional ConditionsCWE-20Improper Input ValidationCWE-703Improper Check or Handling of Exceptional ConditionsCWE-122Heap-based Buffer OverflowCWE-416Use After FreeCWE-532Insertion of Sensitive Information into Log FileCWE-447Unimplemented or Unsupported Feature in UICWE-401Missing Release of Memory after Effective LifetimeCWE-404Improper Resource Shutdown or ReleaseCWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-400Uncontrolled Resource ConsumptionCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-121Stack-based Buffer OverflowCWE-252Unchecked Return Value

Risk Scores

CVSS 3.1

6.5/10

Medium · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
juniper_networks	junos_os_evolved	—	—
juniper_networks	junos_os	—	—

References

advisory