CVE-2016-1276 — Juniper Junos vulnerability

CWE-3993 documents3 sources
Severity
5.9MEDIUMNVD
EPSS
1.0%
top 23.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Juniper JunosJuniper Junos OSJuniper SRX Series
Timeline
PublishedAug 5
Latest updateMay 14

Description

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways (ALGs) enabled allow remote attackers to cause a denial of service (CPU consumption, fab link failure, or flip-flop failovers) via vectors related to in-transit traffic matching ALG rules.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages3 packages

▶NVDjuniper/junos4 versions+3

🔴Vulnerability Details

1
GHSA
GHSA-8j6g-84v3-7fj6: Juniper Junos OS before 12↗2022-05-14
▶

📋Vendor Advisories

1
Juniper
CVE-2016-1276: Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series c↗2016-08-05
▶