Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921)
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.
Summary
By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop information for legitimate traffic. In extreme cases, the crafted IPv6 traffic may result in a total resource exhaustion and kernel panic. The issue is triggered by traffic destined to the router. Transit traffic does not trigger the vulnerability. This issue only affects devices with IPv6 enabled and configured. Devices not configured to process IPv6 traffic are unaffected by this vulnerability. This issue was found during internal product security testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.3 prior to 12.3R3-S4; 12.3X48 prior to 12.3X48-D30; 13.3 prior to 13.3R10, 13.3R4-S11; 14.1 prior to 14.1R2-S8, 14.1R4-S12, 14.1R8; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R3-S10, 14.2R4-S7, 14.2R6; 15.1 prior to 15.1F2-S5, 15.1F5-S2, 15.1F6, 15.1R3; 15.1X49 prior to 15.1X49-D40; 15.1X53 prior to 15.1X53-D57, 15.1X53-D70.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Juniper | Junos OS | 11.4 to before 11.4R13-S3; 12.3 to before 12.3R3-S4; 12.3X48 to before 12.3X48-D30; 13.3 prior to 13.3R10, 13.3R4-S11; 14.1 prior to 14.1R2-S8, 14.1R4-S12, 14.1R8; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 to before 14.1X55-D35; 14.2 prior to 14.2R3-S10, 14.2R4-S7, 14.2R6; 15.1 prior to 15.1F2-S5, 15.1F5-S2, 15.1F6, 15.1R3; 15.1X49 to before 15.1X49-D40; 15.1X53 prior to 15.1X53-D57, 15.1X53-D70 | 11.4R13-S3, 12.3R3-S4, 12.3X48-D30, 14.1X55-D35, 15.1X49-D40 | Patch available | CNA |
- Junos OS VendorJuniper Affected 11.4 to before 11.4R13-S3; 12.3 to before 12.3R3-S4; 12.3X48 to before 12.3X48-D30; 13.3 prior to 13.3R10, 13.3R4-S11; 14.1 prior to 14.1R2-S8, 14.1R4-S12, 14.1R8; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 to before 14.1X55-D35; 14.2 prior to 14.2R3-S10, 14.2R4-S7, 14.2R6; 15.1 prior to 15.1F2-S5, 15.1F5-S2, 15.1F6, 15.1R3; 15.1X49 to before 15.1X49-D40; 15.1X53 prior to 15.1X53-D57, 15.1X53-D70 Fixed in 11.4R13-S3, 12.3R3-S4, 12.3X48-D30, 14.1X55-D35, 15.1X49-D40 Patch available CNA
CPE configurations NVD · 71
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:* | 11.4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r1:*:*:*:*:*:* | 11.4 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r10:*:*:*:*:*:* | 11.4 r10 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r11:*:*:*:*:*:* | 11.4 r11 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r12:*:*:*:*:*:* | 11.4 r12 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r2:*:*:*:*:*:* | 11.4 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r3:*:*:*:*:*:* | 11.4 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r4:*:*:*:*:*:* | 11.4 r4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r5:*:*:*:*:*:* | 11.4 r5 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r6:*:*:*:*:*:* | 11.4 r6 | Vulnerable | Juniper |
- cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:* Versions 11.4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r1:*:*:*:*:*:* Versions 11.4 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r10:*:*:*:*:*:* Versions 11.4 r10 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r11:*:*:*:*:*:* Versions 11.4 r11 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r12:*:*:*:*:*:* Versions 11.4 r12 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r2:*:*:*:*:*:* Versions 11.4 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r3:*:*:*:*:*:* Versions 11.4 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r4:*:*:*:*:*:* Versions 11.4 r4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r5:*:*:*:*:*:* Versions 11.4 r5 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r6:*:*:*:*:*:* Versions 11.4 r6 Vulnerable ·Juniper
Show 61 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:juniper:junos:11.4:r7:*:*:*:*:*:* | 11.4 r7 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r8:*:*:*:*:*:* | 11.4 r8 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4:r9:*:*:*:*:*:* | 11.4 r9 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:11.4r13:s2:*:*:*:*:*:* | 11.4r13 s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:* | 12.3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:* | 12.3 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:* | 12.3 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:* | 12.3 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:* | 12.3x48 d10 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:* | 12.3x48 d15 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:* | 12.3x48 d25 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:* | 13.3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:* | 13.3 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:* | 13.3 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:* | 13.3 r2-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:* | 13.3 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:* | 13.3 r4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r4-s11:*:*:*:*:*:* | 13.3 r4-s11 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:* | 13.3 r5 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:* | 13.3 r6 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:* | 13.3 r7 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:* | 13.3 r8 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:* | 13.3 r9 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:* | 14.1 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:* | 14.1 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:* | 14.1 r4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1:r8:*:*:*:*:*:* | 14.1 r8 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:* | 14.1x53 d15 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:* | 14.1x53 d16 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:* | 14.1x53 d25 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:* | 14.1x53 d26 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:* | 14.1x53 d27 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:* | 14.1x53 d40 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x55:*:*:*:*:*:*:* | 14.1x55 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.1x55:d30:*:*:*:*:*:* | 14.1x55 d30 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:* | 14.2 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:* | 14.2 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:* | 14.2 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:* | 14.2 r4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:* | 14.2 r6 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:* | 15.1 f1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:* | 15.1 f2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:* | 15.1 f5 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:* | 15.1 f6 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:* | 15.1 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:* | 15.1x49 d10 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:* | 15.1x49 d20 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:* | 15.1x49 d30 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:* | 15.1x49 d35 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:* | 15.1x53 d20 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:* | 15.1x53 d21 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:* | 15.1x53 d25 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:* | 15.1x53 d30 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:* | 15.1x53 d32 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:* | 15.1x53 d33 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:* | 15.1x53 d34 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d50:*:*:*:*:*:* | 15.1x53 d50 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d51:*:*:*:*:*:* | 15.1x53 d51 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d52:*:*:*:*:*:* | 15.1x53 d52 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:15.1x53:d55:*:*:*:*:*:* | 15.1x53 d55 | Vulnerable | Juniper |
- cpe:2.3:o:juniper:junos:11.4:r7:*:*:*:*:*:* Versions 11.4 r7 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r8:*:*:*:*:*:* Versions 11.4 r8 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4:r9:*:*:*:*:*:* Versions 11.4 r9 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:11.4r13:s2:*:*:*:*:*:* Versions 11.4r13 s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:* Versions 12.3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:* Versions 12.3 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:* Versions 12.3 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:* Versions 12.3 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:* Versions 12.3x48 d10 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:* Versions 12.3x48 d15 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:* Versions 12.3x48 d25 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:* Versions 13.3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:* Versions 13.3 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:* Versions 13.3 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r2-s2:*:*:*:*:*:* Versions 13.3 r2-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:* Versions 13.3 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:* Versions 13.3 r4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r4-s11:*:*:*:*:*:* Versions 13.3 r4-s11 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:* Versions 13.3 r5 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:* Versions 13.3 r6 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:* Versions 13.3 r7 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:* Versions 13.3 r8 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:* Versions 13.3 r9 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:* Versions 14.1 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:* Versions 14.1 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:* Versions 14.1 r4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1:r8:*:*:*:*:*:* Versions 14.1 r8 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:* Versions 14.1x53 d15 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:* Versions 14.1x53 d16 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:* Versions 14.1x53 d25 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:* Versions 14.1x53 d26 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:* Versions 14.1x53 d27 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:* Versions 14.1x53 d40 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x55:*:*:*:*:*:*:* Versions 14.1x55 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.1x55:d30:*:*:*:*:*:* Versions 14.1x55 d30 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:* Versions 14.2 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:* Versions 14.2 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:* Versions 14.2 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:* Versions 14.2 r4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:* Versions 14.2 r6 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:* Versions 15.1 f1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:* Versions 15.1 f2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:* Versions 15.1 f5 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:* Versions 15.1 f6 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:* Versions 15.1 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:* Versions 15.1x49 d10 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:* Versions 15.1x49 d20 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:* Versions 15.1x49 d30 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:* Versions 15.1x49 d35 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:* Versions 15.1x53 d20 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:* Versions 15.1x53 d21 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:* Versions 15.1x53 d25 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:* Versions 15.1x53 d30 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:* Versions 15.1x53 d32 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:* Versions 15.1x53 d33 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:* Versions 15.1x53 d34 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d50:*:*:*:*:*:* Versions 15.1x53 d50 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d51:*:*:*:*:*:* Versions 15.1x53 d51 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d52:*:*:*:*:*:* Versions 15.1x53 d52 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:15.1x53:d55:*:*:*:*:*:* Versions 15.1x53 d55 Vulnerable ·Juniper
Remediation
- Fix · CNA Junos OS (Juniper Networks) Fixed in 11.4R13-S3, 12.3R3-S4, 12.3X48-D30, 14.1X55-D35, 15.1X49-D40
Timeline
- 2026-10-02 Threatist record created from CVE-2016-4921
- 2026-10-03 Alias added: GHSA-mh47-23hp-5vf8
References
Advisory 1
More Juniper Junos vulnerabilities
- TI-2023-18638 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to… KEVCVSS 3.1CRITICAL 9.8
- TI-2020-01585 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
- TI-2025-15550 Junos OS: An local attacker with shell access can execute arbitrary code KEVCVSS 4.0MEDIUM 6.7
- TI-2023-18644 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files KEVCVSS 3.1MEDIUM 5.3
- TI-2023-18640 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files KEVCVSS 3.1MEDIUM 5.3
Sources
- CVE-2016-4921 · CVE Program
- CVE-2016-4921 · NVD
- FIRST EPSS
- GHSA-mh47-23hp-5vf8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences