CVE-2016-1256

MEDIUM

Juniper Junos OS Multiple Versions - DoS via Malformed IGMPv3 Packet

Title source: llm
STIX 2.1

Description

Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R7, 14.1 before 14.1R5, 14.1X53 before 14.1X53-D18 or 14.1X53-D30, 14.1X55 before 14.1X55-D25, 14.2 before 14.2R4, 15.1 before 15.1R2, and 15.1X49 before 15.1X49-D10 allow remote attackers to cause a denial of service via a malformed IGMPv3 packet, aka a "multicast denial of service."

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1035107

Scores

CVSS v3 5.3
EPSS 0.0048
EPSS Percentile 65.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE
CWE-399
Status published
Products (8)
juniper/junos 12.1x44 (10 CPE variants)
juniper/junos 12.1x46 (7 CPE variants)
juniper/junos 12.1x47 (4 CPE variants)
juniper/junos 12.3 (10 CPE variants)
juniper/junos 12.3x48 d10 (2 CPE variants)
juniper/junos 13.2 (6 CPE variants)
juniper/junos 13.2x51 d15 (7 CPE variants)
juniper/junos 13.3 (4 CPE variants)
Published Jan 15, 2016
Tracked Since Feb 18, 2026