5.9

CVE-2016-1257

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R1 before 14.2R5, 14.2R3 before 14.2R3-S4, 14.2R4 before 14.2R4-S1, 15.1 before 15.1R3, 15.1F2 before 15.1F2-S2, and 15.1X49 before 15.1X49-D40, when LDP is enabled, allows remote attackers to cause a denial of service (RPD routing process crash) via a crafted LDP packet.

Data is provided by the National Vulnerability Database (NVD)
Juniper ≫ Junos Version13.2 Updater5
Juniper ≫ Junos Version13.2 Updater6
Juniper ≫ Junos Version13.2 Updater7
Juniper ≫ Junos Version13.2 Updater7-s1
Juniper ≫ Junos Version13.2 Updater7-s2
Juniper ≫ Junos Version13.3 Updater1
Juniper ≫ Junos Version13.3 Updater2
Juniper ≫ Junos Version13.3 Updater3
Juniper ≫ Junos Version13.3 Updater4
Juniper ≫ Junos Version13.3 Updater5
Juniper ≫ Junos Version13.3 Updater6
Juniper ≫ Junos Version13.3 Updater7
Juniper ≫ Junos Version14.1 Updater1
Juniper ≫ Junos Version14.1 Updater2
Juniper ≫ Junos Version14.1 Updater3
Juniper ≫ Junos Version14.1 Updater4
Juniper ≫ Junos Version14.1 Updater5
Juniper ≫ Junos Version14.1x51
Juniper ≫ Junos Version14.1x51 Updated60
Juniper ≫ Junos Version14.1x53
Juniper ≫ Junos Version14.1x53 Updated10
Juniper ≫ Junos Version14.1x53 Updated15
Juniper ≫ Junos Version14.1x53 Updated25
Juniper ≫ Junos Version14.1x53 Updated26
Juniper ≫ Junos Version14.2 Updater1
Juniper ≫ Junos Version14.2 Updater2
Juniper ≫ Junos Version14.2 Updater3
Juniper ≫ Junos Version14.2 Updater4
Juniper ≫ Junos Version15.1
Juniper ≫ Junos Version15.1 Updatef2
Juniper ≫ Junos Version15.1 Updatef2-s1
Juniper ≫ Junos Version15.1 Updater1
Juniper ≫ Junos Version15.1 Updater2
Juniper ≫ Junos Version15.1x49 Updated10
Juniper ≫ Junos Version15.1x49 Updated20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.61% 0.671
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.