CVE-2017-2340

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-24 · updated 2026-06-17
Weakness: CWE-20

Description

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can result in a PFE (Packet Forwarding Engine) hang or crash.

Affected products

Juniper Junos OS: 15.1-r3, 15.1-r4, 16.1-r1, 16.1-r2

References

http://www.securityfocus.com/bid/97607
http://www.securitytracker.com/id/1038254
https://kb.juniper.net/JSA10786
http://www.securityfocus.com/bid/97607
http://www.securitytracker.com/id/1038254
https://kb.juniper.net/JSA10786

Get alerted when CVE-2017-2340 or the next vulnerability affects your stack