Juniper Junos PIM Remote Denial of Service (JSA10548)

medium Nessus Plugin ID 70477

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A flaw in the way in which the Next-Generation Multicast VPN (NGEN MVPN) environment process large numbers of specifically crafted PIM join messages can cause the RPD routing daemon to crash.

Solution

Apply the relevant Junos upgrade referenced in Juniper advisory JSA10548.

Plugin Details

Severity: Medium

ID: 70477

File Name: juniper_jsa10548.nasl

Version: 1.5

Type: combined

Family: Junos Local Security Checks

Published: 10/17/2013

Updated: 7/12/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Medium

Base Score: 6.3

Temporal Score: 4.7

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:N/A:C

Vulnerability Information

CPE: cpe:/o:juniper:junos

Required KB Items: Host/Juniper/JUNOS/Version, Host/Juniper/JUNOS/BuildDate

Exploit Ease: No known exploits are available

Patch Publication Date: 10/9/2013

Vulnerability Publication Date: 10/9/2013

Reference Information

CVE: CVE-2013-6170

BID: 62973

Detections

Analytics