Vulnerability Description
Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on line card resets and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Routers not configured to process IPv6 traffic are unaffected by this vulnerability. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Juniper | Junose | >= 10.3, <= 10.3.3 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/93533Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037012Third Party AdvisoryVDB Entry
- https://kb.juniper.net/JSA10767Vendor Advisory
- http://www.securityfocus.com/bid/93533Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037012Third Party AdvisoryVDB Entry
- https://kb.juniper.net/JSA10767Vendor Advisory
FAQ
What is CVE-2016-4925?
CVE-2016-4925 is a vulnerability with a CVSS score of 7.5 (HIGH). Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover w...
How severe is CVE-2016-4925?
CVE-2016-4925 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4925?
Check the references section above for vendor advisories and patch information. Affected products include: Juniper Junose.