Juniper Networks JUNOS IPv6 Packet Processing Remote Denial of Service Vulnerability

Bugtraq ID:	18930
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 10 2006 12:00AM
Updated:	Jul 12 2006 10:08PM
Credit:	Reported by the vendor.
Vulnerable:	Juniper JUNOS 8.0 Juniper JUNOS 6.4 Juniper JUNOS 6.3 Juniper JUNOS 6.2 Juniper JUNOS 6.1 Juniper JUNOS 5.7 Juniper JUNOS 5.6 Juniper JUNOS 5.5 Juniper JUNOS 5.4 Juniper JUNOS 5.3 Juniper JUNOS 5.2 Juniper JUNOS 5.1 Juniper JUNOS 5.0
Not Vulnerable:

Juniper Networks JUNOS IPv6 Packet Processing Remote Denial of Service Vulnerability

JUNOS is prone to a remote denial-of-service vulnerability. This issue arises when the application consistently handles specially crafted IPv6 packets.

All versions of JUNOS Internet Software built prior to May 10, 2006 running on M-series, T-series, and J-series routers are vulnerable.

Juniper Networks JUNOS IPv6 Packet Processing Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Juniper Networks JUNOS IPv6 Packet Processing Remote Denial of Service Vulnerability

Solution:
The vendor has released fixes to address this issue. All versions of JUNOS software built on or after May 10, 2006 are not affected. Please contact the vendor to obtain fixes.

Juniper Networks JUNOS IPv6 Packet Processing Remote Denial of Service Vulnerability

References:

• Certain crafted IPv6 packets cause the kernel to (Juniper Networks)
  
• Juniper Networks Homepage (Juniper Networks)