5.9

CVE-2016-1262

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Update d40 Version <= 12.1x46
Juniper ≫ Junos Version 12.1x47
Juniper ≫ Junos Version 12.1x47 Update d10
Juniper ≫ Junos Version 12.1x47 Update d15
Juniper ≫ Junos Version 12.1x47 Update d20
Juniper ≫ Junos Version 12.3x48 Update d10
Juniper ≫ Junos Version 12.3x48 Update d15
Juniper ≫ Junos Version 15.1x49 Update d10
Juniper ≫ Junos Version 15.1x49 Update d20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.54% 0.716
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721
Vendor Advisory
http://www.securitytracker.com/id/1035108