Test ID:	1.3.6.1.4.1.25623.1.0.106750
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS Buffer Overflow Vulnerability
Summary:	Junos OS is prone to a buffer overflow vulnerability in the keyboard;driver.
Description:	Summary: Junos OS is prone to a buffer overflow vulnerability in the keyboard driver. Vulnerability Insight: Incorrect signedness comparison in the ioctl handler allows a malicious local user to overwrite a portion of the kernel memory. A local user may crash the kernel, read a portion of kernel memory and execute arbitrary code in kernel context. Vulnerability Impact: A local attacker may escalate privileges by executing arbitrary code. Affected Software/OS: Junos OS 12.3X48, 14.1, 14.2, 15.1 and 16.1. Solution: New builds of Junos OS software are available from Juniper. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1886 BugTraq ID: 90734 http://www.securityfocus.com/bid/90734 FreeBSD Security Advisory: FreeBSD-SA-16:18 https://www.freebsd.org/security/advisories/FreeBSD-SA-16:18.atkbd.asc http://cturt.github.io/SETFKEY.html http://www.securitytracker.com/id/1035905
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.