PT-2016-4679 · Juniper Networks · Junos

Publicado 2016-09-09 · Atualizado 2017-09-01 · CVE-2016-1275

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 13.3R9 Juniper Junos OS versions 14.1R6 before 14.1R6-S1 Juniper Junos OS versions 14.1 before 14.1R7

Description The issue allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface, when configured with VPLS routing-instances.

Recommendations For Juniper Junos OS versions prior to 13.3R9, update to version 13.3R9 or later. For Juniper Junos OS versions 14.1R6 before 14.1R6-S1, update to version 14.1R6-S1 or later. For Juniper Junos OS versions 14.1 before 14.1R7, update to version 14.1R7 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-1275

Produtos afetados

Junos

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-1275 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1275 · Nota de Segurança
• http://securitytracker.com/id/1036301 · Nota
• http://securityfocus.com/bid/91758 · Nota
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750 · Aviso do Fabricante