Test ID:	1.3.6.1.4.1.25623.1.0.106506
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS jdhcpd DoS Vulnerability
Summary:	Junos OS is prone to a denial of service vulnerability in jdhcpd due to;crafted DHCPv6 packets.
Description:	Summary: Junos OS is prone to a denial of service vulnerability in jdhcpd due to crafted DHCPv6 packets. Vulnerability Insight: The Junos OS jdhcpd daemon provides advanced DHCP services to subscribers on all major hardware platforms. An issue was discovered that can cause jdhcpd to crash and restart when a crafted DHCPv6 packet is received from a subscriber. Repeated crashes of the jdhcpd process may constitute an extended denial of service condition for subscribers attempting to obtain IPv6 addresses. This issue only affects devices configured for DHCP services via IPv6 with either Server or Relay enabled. IPv4 is not vulnerable to this issue. Vulnerability Impact: An attacker may cause a denial of service condition. Affected Software/OS: Junos OS 11.4, 12.1, 12.3, 13.2, 13.3, 14.1, 14.2 and 15.1. Solution: New builds of Junos OS software are available from Juniper. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2301 BugTraq ID: 95396 http://www.securityfocus.com/bid/95396 http://www.securitytracker.com/id/1037596
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.