CVE-2016-1275

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-09 · updated 2026-06-17
Weakness: CWE-399

Description

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface.

Affected products

Juniper Junos OS: through 13.3; 14.1, 14.1-r1, 14.1-r2, 14.1-r3, 14.1-r4, 14.1-r5 (+1)

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750
http://www.securityfocus.com/bid/91758
http://www.securitytracker.com/id/1036301
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750
http://www.securityfocus.com/bid/91758
http://www.securitytracker.com/id/1036301

Get alerted when CVE-2016-1275 or the next vulnerability affects your stack