CVE-2016-1276

Опубликовано: 05 авг. 2016

Источник: nvd

CVSS3: 5.9

CVSS2: 7.1

EPSS Низкий

Описание

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways (ALGs) enabled allow remote attackers to cause a denial of service (CPU consumption, fab link failure, or flip-flop failovers) via vectors related to in-transit traffic matching ALG rules.

Ссылки

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10751
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/91764
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036305
Third Party Advisory
VDB Entry
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10751
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/91764
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036305
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00987

Низкий

5.9 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-8j6g-84v3-7fj6