Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-2315

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery (ND) packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious network-based packet flood of these crafted IPv6 NDP packets may eventually lead to resource exhaustion and a denial of service. The affected Junos OS versions are: 12.3 prior to 12.3R12-S4, 12.3R13; 13.3 prior to 13.3R10; 14.1 prior to 14.1R8-S3, 14.1R9; 14.1X53 prior ro 14.1X53-D12, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R6-S4, 14.2R7-S6, 14.2R8; 15.1 prior to 15.1R5; 16.1 before 16.1R3; 16.2 before 16.2R1-S3, 16.2R2. 17.1R1 and all subsequent releases have a resolution for this vulnerability.

Published

2017-04-24T15:59:00.237

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-772
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 12.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 13.3 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x53 Yes
Operating System juniper junos 14.1x55 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 14.2 Yes
Operating System juniper junos 15.1 Yes
Operating System juniper junos 15.1 Yes
Operating System juniper junos 15.1 Yes
Operating System juniper junos 15.1 Yes
Operating System juniper junos 16.1 Yes
Operating System juniper junos 16.2 Yes
Operating System juniper junos 17.1 Yes
References