Vulnerability Details : CVE-2017-2315
On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery (ND) packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious network-based packet flood of these crafted IPv6 NDP packets may eventually lead to resource exhaustion and a denial of service. The affected Junos OS versions are: 12.3 prior to 12.3R12-S4, 12.3R13; 13.3 prior to 13.3R10; 14.1 prior to 14.1R8-S3, 14.1R9; 14.1X53 prior ro 14.1X53-D12, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R6-S4, 14.2R7-S6, 14.2R8; 15.1 prior to 15.1R5; 16.1 before 16.1R3; 16.2 before 16.2R1-S3, 16.2R2. 17.1R1 and all subsequent releases have a resolution for this vulnerability.
Vulnerability category: Denial of service
Products affected by CVE-2017-2315
- cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r7:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r8:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:r9:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:r13:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1x55:d35:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-2315
0.49%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 63 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-2315
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST | |
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2017-2315
-
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-2315
-
http://www.securityfocus.com/bid/97615
Juniper Junos CVE-2017-2315 Denial of Service VulnerabilityThird Party Advisory;VDB Entry
-
http://www.securitytracker.com/id/1038253
Juniper Junos EX Series Ethernet Switches IPv6 ND Processing Memory Leak Lets Remote Users Consume Excessive Memory Resources - SecurityTracker
-
https://kb.juniper.net/JSA10781
Juniper Networks - 2017-04 Security Bulletin: EX Series: Crafted IPv6 NDP packet causing a slow memory leak on EX Series Switches (CVE-2017-2315)Mitigation;Vendor Advisory
Jump to