CVE-2013-6170

2013-10-1723:55:04

CWE-20

[email protected]

web.nvd.nist.gov

juniper

junos

ngen mvpn

denial of service

vulnerability

cve-2013-6170

rpd routing daemon

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

JSON

Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a denial of service (RPD routing daemon crash) via a large number of crafted PIM (S,G) join requests.

Affected configurations

NVD

Node

juniperjunosMatch10.0

juniperjunosMatch10.4

juniperjunosMatch11.1

juniperjunosMatch11.2

juniperjunosMatch11.4

CPENameOperatorVersion
juniper:junosjuniper junoseq10.0
juniper:junosjuniper junoseq10.4
juniper:junosjuniper junoseq11.1
juniper:junosjuniper junoseq11.2
juniper:junosjuniper junoseq11.4

CPE	Name	Operator	Version
juniper:junos	juniper junos	eq	10.0
juniper:junos	juniper junos	eq	10.4
juniper:junos	juniper junos	eq	11.1
juniper:junos	juniper junos	eq	11.2
juniper:junos	juniper junos	eq	11.4