CVE-2016-1275

MEDIUM

Juniper Junos OS <13.3R9-14.1R7 - Info Disclosure

Title source: llm

Description

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface.

References (3)

[Vendor Advisory] http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91758

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036301

Scores

CVSS v3 6.5

EPSS 0.0035

EPSS Percentile 57.1%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-399

Status published

Affected Products (9)

juniper/junos < 13.3

juniper/junos

n/a/n/a

Timeline

Published Sep 09, 2016

Tracked Since Feb 18, 2026