CVE-2016-1267

Published: Apr 15, 2016Modified: May 6, 2026

6.7

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R3-S4, 15.1 before 15.1F2, or 15.1R2, 15.1X49 before 15.1X49-D20, and 16.1 before 16.1R1 allows local users to read, delete, or modify arbitrary files via unspecified vectors.

Affected (68)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

68 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Up to 12.1x44
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x46 d10
Juniper Junos	Version 12.1x46 d15
Juniper Junos	Version 12.1x46 d20
Juniper Junos	Version 12.1x46 d25
Juniper Junos	Version 12.1x46 d30
Juniper Junos	Version 12.1x46 d35
Juniper Junos	Version 12.1x47
Juniper Junos	Version 12.1x47 d10
Juniper Junos	Version 12.1x47 d15
Juniper Junos	Version 12.1x47 d20
Juniper Junos	Version 12.3
Juniper Junos	Version 12.3 r10
Juniper Junos	Version 12.3 r1
Juniper Junos	Version 12.3 r2
Juniper Junos	Version 12.3 r3
Juniper Junos	Version 12.3 r4
Juniper Junos	Version 12.3 r5
Juniper Junos	Version 12.3 r6
Juniper Junos	Version 12.3 r7
Juniper Junos	Version 12.3 r8
Juniper Junos	Version 12.3 r9
Juniper Junos	Version 12.3x48 d10
Juniper Junos	Version 12.3x48 d15
Juniper Junos	Version 13.2
Juniper Junos	Version 13.2 r1
Juniper Junos	Version 13.2 r2
Juniper Junos	Version 13.2 r3
Juniper Junos	Version 13.2 r4
Juniper Junos	Version 13.2 r5
Juniper Junos	Version 13.2 r6
Juniper Junos	Version 13.2 r7-s1
Juniper Junos	Version 13.2 r7-s2
Juniper Junos	Version 13.2 r7
Juniper Junos	Version 13.2x51 d15
Juniper Junos	Version 13.2x51 d20
Juniper Junos	Version 13.2x51 d21
Juniper Junos	Version 13.2x51 d25
Juniper Junos	Version 13.2x51 d26
Juniper Junos	Version 13.2x51 d30
Juniper Junos	Version 13.2x51 d35
Juniper Junos	Version 13.3
Juniper Junos	Version 13.3 r1
Juniper Junos	Version 13.3 r2-s2
Juniper Junos	Version 13.3 r2
Juniper Junos	Version 13.3 r3
Juniper Junos	Version 13.3 r4
Juniper Junos	Version 13.3 r5
Juniper Junos	Version 13.3 r6
Juniper Junos	Version 14.1
Juniper Junos	Version 14.1 r1
Juniper Junos	Version 14.1 r2
Juniper Junos	Version 14.1 r3
Juniper Junos	Version 14.1 r4
Juniper Junos	Version 14.1 r5
Juniper Junos	Version 14.1x53
Juniper Junos	Version 14.1x53 d10
Juniper Junos	Version 14.1x53 d15
Juniper Junos	Version 14.1x53 d16
Juniper Junos	Version 14.1x53 d25
Juniper Junos	Version 14.1x53 d26
Juniper Junos	Version 14.2 r1
Juniper Junos	Version 14.2 r2
Juniper Junos	Version 14.2 r3
Juniper Junos	Version 15.1
Juniper Junos	Version 15.1x49 d10
Juniper Junos	Version 16.1

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (4)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10730

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id/1035668

Source: cve@mitre.org

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10730

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035668

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.