PT-2016-4679 · Juniper Networks · Junos

Published 2016-09-09 · Updated 2017-09-01 · CVE-2016-1275

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 13.3R9 Juniper Junos OS versions 14.1R6 before 14.1R6-S1 Juniper Junos OS versions 14.1 before 14.1R7

Description The issue allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface, when configured with VPLS routing-instances.

Recommendations For Juniper Junos OS versions prior to 13.3R9, update to version 13.3R9 or later. For Juniper Junos OS versions 14.1R6 before 14.1R6-S1, update to version 14.1R6-S1 or later. For Juniper Junos OS versions 14.1 before 14.1R7, update to version 14.1R7 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-1275

Affected Products

Junos

References · 5

• https://osv.dev/vulnerability/CVE-2016-1275 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1275 · Security Note
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750 · Vendor Advisory
• http://securitytracker.com/id/1036301 · Note
• http://securityfocus.com/bid/91758 · Note