CVE-2016-4925

Description

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on line card resets and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Routers not configured to process IPv6 traffic are unaffected by this vulnerability. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

1.482

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-4925 are fixed in junose 10.3.3p0-15	NCM
Vulnerabilities CVE-2016-4925 are fixed in junose 12.3.3p0-6	NCM
Vulnerabilities CVE-2016-4925 are fixed in junose 13.3.3p0-1	NCM
CVE-2016-4925	NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-1704491	Security Update for junose 13.3.3p0-1
PATCH-1704491	Security Update for junose 13.3.3p0-1
PATCH-1704491	Security Update for junose 13.3.3p0-1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234