PT-2016-4680 · Juniper Networks · Junos

Published 2016-08-05 · Updated 2019-06-26 · CVE-2016-1276

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X46-D50 Juniper Junos OS versions 12.1X47 prior to 12.1X47-D23 Juniper Junos OS versions 12.3X48 prior to 12.3X48-D25 Juniper Junos OS versions 15.1X49 prior to 15.1X49-D40

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption, fab link failure, or flip-flop failovers. This occurs via vectors related to in-transit traffic matching Application Layer Gateways (ALGs) rules on a High-End SRX-Series chassis system with one or more ALGs enabled.

Recommendations For Juniper Junos OS versions prior to 12.1X46-D50, update to version 12.1X46-D50 or later. For Juniper Junos OS versions 12.1X47 prior to 12.1X47-D23, update to version 12.1X47-D23 or later. For Juniper Junos OS versions 12.3X48 prior to 12.3X48-D25, update to version 12.3X48-D25 or later. For Juniper Junos OS versions 15.1X49 prior to 15.1X49-D40, update to version 15.1X49-D40 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-1276

Affected Products

Junos

References · 5

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10751 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1276 · Security Note
• http://securitytracker.com/id/1036305 · Note
• http://securityfocus.com/bid/91764 · Note