← Back

CVE-2016-1270

nvd nist
Published: Apr 15, 2016Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with BGP-based L2VPN or VPLS, allows remote attackers to cause a denial of service (daemon restart) via a crafted L2VPN family BGP update.

Affected (51)

Products: Juniper: Junos
1 product
Junos
Configuration A
51 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Up to 12.1x44
Version 12.1x46
Version 12.1x46 d10
Version 12.1x46 d15
Version 12.1x46 d20
Version 12.1x46 d25
Version 12.1x46 d30
Version 12.1x46 d35
Version 12.1x46 d40
Version 12.1x47
Version 12.1x47 d10
Version 12.1x47 d15
Version 12.1x47 d20
Version 12.1x47 d25
Version 12.3
Version 12.3 r1
Version 12.3 r2
Version 12.3 r3
Version 12.3 r4
Version 12.3 r5
Version 12.3 r6
Version 12.3 r7
Version 12.3 r8
Version 12.3x48 d10
Version 12.3x48 d15
Version 13.2
Version 13.2 r1
Version 13.2 r2
Version 13.2 r3
Version 13.2 r4
Version 13.2 r5
Version 13.2 r6
Version 13.2x51 d15
Version 13.2x51 d20
Version 13.2x51 d21
Version 13.2x51 d25
Version 13.2x51 d26
Version 13.2x51 d30
Version 13.2x51 d35
Version 13.3
Version 13.3 r1
Version 13.3 r2
Version 13.3 r3
Version 13.3 r4
Version 13.3 r5
Version 13.3 r6
Version 14.1
Version 14.1 r1
Version 14.1 r2
Version 14.1 r3
Version 14.2 r1

Related CWEs

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.