Lucene search

[email protected]CVE-2016-4925

HistoryOct 13, 2017 - 5:29 p.m.

CVE-2016-4925

2017-10-1317:29:00

CWE-19

[email protected]

web.nvd.nist.gov

cve-2016-4925

ipv6

router

line card reset

vulnerability

juniper sirt

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.003 Low

EPSS

Percentile

70.4%

JSON

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on line card resets and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Routers not configured to process IPv6 traffic are unaffected by this vulnerability. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.

Affected configurations

NVD

Node

juniperjunoseRange10.3–10.3.3

juniperjunoseRange12.3.0–12.3.3

juniperjunoseRange13.3.0–13.3.3

juniperjunoseRange14.3.0–14.3.1

CPENameOperatorVersion
juniper:junosejuniper junosele10.3.3
juniper:junosejuniper junosele12.3.3
juniper:junosejuniper junosele13.3.3
juniper:junosejuniper junosele14.3.1

CPE	Name	Operator	Version
juniper:junose	juniper junose	le	10.3.3
juniper:junose	juniper junose	le	12.3.3
juniper:junose	juniper junose	le	13.3.3
juniper:junose	juniper junose	le	14.3.1

CNA Affected

[
  {
    "product": "JunosE",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "status": "affected",
        "version": "10.3 prior to 10.3.3p0-15"
      },
      {
        "status": "affected",
        "version": "12.3 prior to 12.3.3p0-6"
      },
      {
        "status": "affected",
        "version": "13.3 prior to 13.3.3p0-1"
      },
      {
        "status": "affected",
        "version": "14.3 prior to 14.3.2"
      }
    ]
  }
]

References

www.securityfocus.com/bid/93533

www.securitytracker.com/id/1037012

kb.juniper.net/JSA10767

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.003 Low

EPSS

Percentile

70.4%

JSON

Related for CVE-2016-4925

nvd1 prion1 cvelist1 nessus1