What is CVE-2017-2315?

CVE-2017-2315 is a high-severity vulnerability in Juniper Junos, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 7.5/10. Published 2017-04-24.

How severe is CVE-2017-2315?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Juniper Junos

CVE-2017-2315

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery (ND) packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious network-based packet flood of these crafted IPv6 NDP packets may eventually lead to resource exhaustion and a denial of service. The affected Junos OS versions are: 12.3 prior to 12.3R12-S4, 12.3R13; 13.3 prior to 13.3R10; 14.1 prior to 14.1R8-S3, 14.1R9; 14.1X53 prior ro 14.1X53-D12, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R6-S4, 14.2R7-S6, 14.2R8; 15.1 prior to 15.1R5; 16.1 before 16.1R3; 16.2 before 16.2R1-S3, 16.2R2. 17.1R1 and all subsequent releases have a resolution for this vulnerability.

Published 2017-04-24 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.025 (83.9th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 84th percentile — 83.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.025 · newest: 0.025 · change: 0.000

Affected products

Juniper Junos — versions 12.3, 13.3, 14.1
Juniper Networks Junos OS On Ex Series Ethernet Switches With Ipv6 Enabled — versions 14.1 prior to 14.1R8-S3, 14.1R9, 12.3 prior to 12.3R12-S4, 12.3R13, 14.1X55 prior to 14.1X55-D35

Weakness classification (CWE)

CWE-772 — Missing Release of Resource after Effective Lifetime

References

www.securitytracker.com/id/1038253 (vdb-entry)
www.securityfocus.com/bid/97615 (VDB Entry, Third Party Advisory, vdb-entry)
kb.juniper.net/JSA10781 (Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2017-2315?: CVE-2017-2315 is a high-severity vulnerability in Juniper Junos, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 7.5/10. Published 2017-04-24.
How severe is CVE-2017-2315?: High severity. CVSS v3 base score is 7.5 out of 10.