CVE-2016-1262

Published: Jan 15, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet.

Affected (9)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Up to 12.1x46
Juniper Junos	Version 12.1x47
Juniper Junos	Version 12.1x47 d10
Juniper Junos	Version 12.1x47 d15
Juniper Junos	Version 12.1x47 d20
Juniper Junos	Version 12.3x48 d10
Juniper Junos	Version 12.3x48 d15
Juniper Junos	Version 15.1x49 d10
Juniper Junos	Version 15.1x49 d20

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id/1035108

Source: cve@mitre.org

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035108

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.