Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2016-1270

Published: Apr 15, 2016 | Modified: Apr 20, 2016
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-1270
CWEhttps://cwe.mitre.org/data/definitions/19.html

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with BGP-based L2VPN or VPLS, allows remote attackers to cause a denial of service (daemon restart) via a crafted L2VPN family BGP update.

Affected Software

Name Vendor Start Version End Version
Junos Juniper * 12.1x44
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x46 12.1x46
Junos Juniper 12.1x47 12.1x47
Junos Juniper 12.1x47 12.1x47
Junos Juniper 12.1x47 12.1x47
Junos Juniper 12.1x47 12.1x47
Junos Juniper 12.1x47 12.1x47
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3 12.3
Junos Juniper 12.3x48 12.3x48
Junos Juniper 12.3x48 12.3x48
Junos Juniper 13.2 13.2
Junos Juniper 13.2 13.2
Junos Juniper 13.2 13.2
Junos Juniper 13.2 13.2
Junos Juniper 13.2 13.2
Junos Juniper 13.2 13.2
Junos Juniper 13.2 13.2
Junos Juniper 13.2x51 13.2x51
Junos Juniper 13.2x51 13.2x51
Junos Juniper 13.2x51 13.2x51
Junos Juniper 13.2x51 13.2x51
Junos Juniper 13.2x51 13.2x51
Junos Juniper 13.2x51 13.2x51
Junos Juniper 13.2x51 13.2x51
Junos Juniper 13.3 13.3
Junos Juniper 13.3 13.3
Junos Juniper 13.3 13.3
Junos Juniper 13.3 13.3
Junos Juniper 13.3 13.3
Junos Juniper 13.3 13.3
Junos Juniper 13.3 13.3
Junos Juniper 14.1 14.1
Junos Juniper 14.1 14.1
Junos Juniper 14.1 14.1
Junos Juniper 14.1 14.1
Junos Juniper 14.2 14.2

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use