High severity · published Oct 13, 2017
CVE-2016-4925
Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler
7.5
CVSS
2.7%
EPSS
No
On KEV
Description
Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on line card resets and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Routers not configured to process IPv6 traffic are unaffected by this vulnerability. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JU
Junose · Juniper
10.3 through 10.3.3; 12.3.0 through 12.3.3; 13.3.0 through 13.3.3; 14.3.0 through 14.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4925
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4925
Third Party Advisory
http://www.securityfocus.com/bid/93533
Third Party Advisory
http://www.securitytracker.com/id/1037012
Vendor Advisory
https://kb.juniper.net/JSA10767
More from Junose
–
CVE-2013-7313
The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State…
–
CVE-2006-2074
Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to the DNS "client code," as demonstrated…