vulnerability

Juniper Junos OS: RPD cores on receiving a crafted L2VPN family BGP update (JSA10737) (CVE-2016-1270)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published

Apr 13, 2016

Added

Apr 14, 2016

Modified

Mar 27, 2026

Description

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with BGP-based L2VPN or VPLS, allows remote attackers to cause a denial of service (daemon restart) via a crafted L2VPN family BGP update.

Solution

juniper-junos-os-upgrade-latest

References

CVE-2016-1270
https://attackerkb.com/topics/CVE-2016-1270
EUVD-EUVD-2016-2369
JUNIPER-JSA10737
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-2369

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report