 |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
| ID de Prueba: | 1.3.6.1.4.1.25623.1.0.106751 |
| Categoría: | JunOS Local Security Checks |
| Título: | Juniper Networks Junos OS ICMPv6 DoS Vulnerability |
| Resumen: | Junos OS is prone to a denial of service vulnerability in ICMPv6 PTB;messages. |
| Descripción: | Summary: Junos OS is prone to a denial of service vulnerability in ICMPv6 PTB messages. Vulnerability Insight: An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. The security implications of IP fragmentation have been discussed at length in various RFCs. An attacker can leverage the generation of IPv6 atomic fragments to trigger the use of fragmentation in an arbitrary IPv6 flow and can subsequently perform any type of fragmentation-based attack against legacy IPv6 nodes that do not implement RFC 6946. However, even nodes that already implement RFC 6946 can be subject to DoS attacks as a result of the generation of IPv6 atomic fragments. This issue is triggered by ICMPv6 traffic destined to the device. Transit IPv6 traffic will not cause this issue to occur, and IPv4 is unaffected by this vulnerability. Vulnerability Impact: An attacker may cause a denial of service condition. Affected Software/OS: Junos OS 12.3X48, 14.1, 14.2, 15.1, 16.1 and 16.2 Solution: New builds of Junos OS software are available from Juniper. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P |
| Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2016-10142 BugTraq ID: 95797 http://www.securityfocus.com/bid/95797 https://tools.ietf.org/html/draft-ietf-6man-deprecate-atomfrag-generation-08 https://tools.ietf.org/html/rfc8021 RedHat Security Advisories: RHSA-2017:0817 http://rhn.redhat.com/errata/RHSA-2017-0817.html http://www.securitytracker.com/id/1038256 |
| Copyright | Copyright (C) 2017 Greenbone AG |
| Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |