Vulnerability in Juniper Junose
CVE-2016-4925
Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on line card resets and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Routers not configured to process IPv6 traffic are unaffected by this vulnerability. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.027 (85.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 85.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.027 · newest: 0.027 · change: 0.000
Affected products
- Juniper Junose
- Juniper Networks Junose — versions 13.3 prior to 13.3.3p0-1, 14.3 prior to 14.3.2, 12.3 prior to 12.3.3p0-6
Weakness classification (CWE)
References
- kb.juniper.net/JSA10767 (Vendor Advisory)
- www.securitytracker.com/id/1037012 (VDB Entry, Third Party Advisory, vdb-entry)
- www.securityfocus.com/bid/93533 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2016-4925?
- CVE-2016-4925 is a high-severity vulnerability in Juniper Junose, classified under CWE-19. CVSS score: 7.5/10. Published 2017-10-13.
- How severe is CVE-2016-4925?
- High severity. CVSS v3 base score is 7.5 out of 10.