What is CVE-2016-1257?

CVE-2016-1257 is a medium-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 5.9/10. Published 2016-01-15.

How severe is CVE-2016-1257?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Improper input validation in Juniper Junos

CVE-2016-1257

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R1 before 14.2R5, 14.2R3 before 14.2R3-S4, 14.2R4 before 14.2R4-S1, 15.1 before 15.1R3, 15.1F2 before 15.1F2-S2, and 15.1X49 before 15.1X49-D40, when LDP is enabled, allows remote attackers to cause a denial of service (RPD routing process crash) via a crafted LDP packet.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.015 (72.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Junos — versions 13.2, 13.3, 14.1
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2016-1257?: CVE-2016-1257 is a medium-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 5.9/10. Published 2016-01-15.
How severe is CVE-2016-1257?: Medium severity. CVSS v3 base score is 5.9 out of 10.