← Back

CVE-2017-10610

nvd nist
Published: Oct 13, 2017Modified: May 13, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D71, 12.3X48 prior to 12.3X48-D55, 15.1X49 prior to 15.1X49-D100 on SRX Series. No other Juniper Networks products or platforms are affected by this issue.

Affected (34)

Products: Juniper: Junos
1 product
Junos
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.1x46
Version 12.1x46 d10
Version 12.1x46 d15
Version 12.1x46 d20
Version 12.1x46 d25
Version 12.1x46 d30
Version 12.1x46 d35
Version 12.1x46 d40
Version 12.1x46 d45
Version 12.1x46 d50
Version 12.1x46 d55
Configuration B
9 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.3x48 d10
Version 12.3x48 d15
Version 12.3x48 d20
Version 12.3x48 d25
Version 12.3x48 d30
Version 12.3x48 d35
Version 12.3x48 d40
Version 12.3x48 d45
Version 12.3x48 d50
Configuration C
14 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x49 d10
Version 15.1x49 d20
Version 15.1x49 d30
Version 15.1x49 d35
Version 15.1x49 d40
Version 15.1x49 d45
Version 15.1x49 d50
Version 15.1x49 d55
Version 15.1x49 d60
Version 15.1x49 d65
Version 15.1x49 d70
Version 15.1x49 d75
Version 15.1x49 d80
Version 15.1x49 d90
Running on/withPlatform Versions
Juniper
Srx Series
All versions

References (4)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.