Anfälligkeitssuche        Suche in 187964 CVE Beschreibungen
und 85075 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.106751
Kategorie:JunOS Local Security Checks
Titel:Junos ICMPv6 DoS Vulnerability
Zusammenfassung:Junos OS is prone to a denial of service vulnerability in ICMPv6 PTB;messages.
Beschreibung:Summary:
Junos OS is prone to a denial of service vulnerability in ICMPv6 PTB
messages.

Vulnerability Insight:
An issue was discovered in the IPv6 protocol specification, related to
ICMP Packet Too Big (PTB) messages. The security implications of IP fragmentation have been discussed at length
in various RFCs. An attacker can leverage the generation of IPv6 atomic fragments to trigger the use of
fragmentation in an arbitrary IPv6 flow and can subsequently perform any type of fragmentation-based attack
against legacy IPv6 nodes that do not implement RFC 6946. However, even nodes that already implement RFC 6946
can be subject to DoS attacks as a result of the generation of IPv6 atomic fragments.

This issue is triggered by ICMPv6 traffic destined to the device. Transit IPv6 traffic will not cause this issue
to occur, and IPv4 is unaffected by this vulnerability.

Vulnerability Impact:
An attacker may cause a denial of service condition.

Affected Software/OS:
Junos OS 12.3X48, 14.1, 14.2, 15.1, 16.1 and 16.2

Solution:
New builds of Junos OS software are available from Juniper.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2016-10142
CopyrightThis script is Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 85075 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.