Juniper Libslax vulnerabilities

5 CVEs affecting Juniper Libslax, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-39534, published 2021-09-20.

More from Juniper.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-39534, published 2021-09-20. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a heap-based buffer overflow.
• CVE-2021-39533, published 2021-09-20. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a heap-based buffer overflow.
• CVE-2021-39531, published 2021-09-20. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a stack-based buffer overflow.
• CVE-2019-1010232, published 2019-07-22. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018) is affected by: Buffer Overflow. The impact is: remote dos. The component…
• CVE-2021-39532, published 2021-09-20. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() located in slaxlexer.c. It allows an attacker to cause Denial of Service.