5.9

CVE-2016-1262

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet.

Data is provided by the National Vulnerability Database (NVD)
Juniper ≫ Junos Updated40 Version <= 12.1x46
Juniper ≫ Junos Version12.1x47
Juniper ≫ Junos Version12.1x47 Updated10
Juniper ≫ Junos Version12.1x47 Updated15
Juniper ≫ Junos Version12.1x47 Updated20
Juniper ≫ Junos Version12.3x48 Updated10
Juniper ≫ Junos Version12.3x48 Updated15
Juniper ≫ Junos Version15.1x49 Updated10
Juniper ≫ Junos Version15.1x49 Updated20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.61% 0.671
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.