2017-10-16 12:31:07 -04:00
{
"CVE_data_meta" : {
"ASSIGNER" : "sirt@juniper.net" ,
"ID" : "CVE-2017-2340" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
2017-10-16 16:44:18 -04:00
"product_name" : "Junos OS on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured" ,
2017-10-16 12:31:07 -04:00
"version" : {
"version_data" : [
{
2017-10-16 16:44:18 -04:00
"version_value" : "15.1 releases from 15.1R3 to 15.1R4"
} ,
{
"version_value" : "16.1 prior to 16.1R3"
} ,
{
"version_value" : "16.2R1 and all subsequent releases have a resolution for this vulnerability"
} ,
{
"version_value" : "All releases prior to 15.1R3 are not affected."
2017-10-16 12:31:07 -04:00
}
]
}
}
]
} ,
2017-10-16 16:44:18 -04:00
"vendor_name" : "Juniper Networks"
2017-10-16 12:31:07 -04:00
}
]
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can result in a PFE (Packet Forwarding Engine) hang or crash."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
2017-10-16 16:44:18 -04:00
"value" : "denial of service vulnerability"
2017-10-16 12:31:07 -04:00
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
2018-04-05 09:33:01 -04:00
"name" : "https://kb.juniper.net/JSA10786" ,
"refsource" : "CONFIRM" ,
2017-10-16 12:31:07 -04:00
"url" : "https://kb.juniper.net/JSA10786"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "97607" ,
"refsource" : "BID" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.securityfocus.com/bid/97607"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "1038254" ,
"refsource" : "SECTRACK" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.securitytracker.com/id/1038254"
}
]
}
}