CVE-2016-1262

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
juniperjunos
𝑥
≤ 12.1x46
juniperjunos
12.1x47:x47
juniperjunos
12.1x47:x47
juniperjunos
12.1x47:x47
juniperjunos
12.1x47:x47
juniperjunos
12.3x48:x48
juniperjunos
12.3x48:x48
juniperjunos
15.1x49:x49
juniperjunos
15.1x49:x49
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721
http://www.securitytracker.com/id/1035108
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10721
http://www.securitytracker.com/id/1035108