7.8

CVE-2017-2301: juniper networks junos os with dhcpv6 enabled

CVSS: 7.8v2.0HighModified
Published 30-05-2017Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2017-2301 is a high (CVSS 7.8) vulnerability in juniper networks junos os with dhcpv6 enabled. EPSS estimates a 2.13% chance of exploitation in the next 30 days, higher than 81.8% of scored vulnerabilities.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v2.0 (NVD)
EPSS score
2.13%
0%100%
Low · +0.23 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 30-05-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 or 12.3R13, 12.3X48 prior to 12.3X48-D40, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D12 or 14.1X53-D35, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R7, 15.1 prior to 15.1F6 or 15.1R3, 15.1X49 prior to 15.1X49-D60, 15.1X53 prior to 15.1X53-D30 and DHCPv6 enabled, when a crafted DHCPv6 packet is received from a subscriber, jdhcpd daemon crashes and restarts. Repeated crashes of the jdhcpd process may constitute an extended denial of service condition for subscribers attempting to obtain IPv6 addresses.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

2.13%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

+0.23 pp

From 1.90% on 21-09-2026

21-09-202621-10-2026
EPSS score
2.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Juniper1 product
  • junos11.4 | 11.4:r1 | 11.4:r10 | 11.4:r11 | 11.4:r12 | 11.4:r2 | 11.4:r3 | 11.4:r4 | 11.4:r5 | 11.4:r6 | 11.4:r7 | 11.4:r8 | 11.4:r9 | 12.1x46 | 12.1x46:d10 | 12.1x46:d15 | 12.1x46:d20 | 12.1x46:d25 | 12.1x46:d30 | 12.1x46:d35 | 12.1x46:d40 | 12.1x46:d45 | 12.1x46:d50 | 12.1x46:d55 | 12.3 | 12.3:r1 | 12.3:r10 | 12.3:r11 | 12.3:r2 | 12.3:r3 | 12.3:r4 | 12.3:r5 | 12.3:r7 | 12.3:r8 | 12.3:r9 | 12.3x48 | 12.3x48:d10 | 12.3x48:d15 | 12.3x48:d20 | 12.3x48:d25 | 12.3x48:d30 | 12.3x48:d35 | 13.2x51 | 13.2x51:d15 | 13.2x51:d20 | 13.2x51:d21 | 13.2x51:d25 | 13.2x51:d26 | 13.2x51:d30 | 13.2x51:d35 | 13.3 | 13.3:r1 | 13.3:r2 | 13.3:r3 | 13.3:r4 | 13.3:r5 | 13.3:r6 | 13.3:r7 | 13.3:r8 | 13.3:r9 | 14.1 | 14.1:r1 | 14.1:r2 | 14.1:r3 | 14.1:r4 | 14.1:r5 | 14.1:r6 | 14.1:r7 | 14.1x53 | 14.1x53:d10 | 14.1x53:d35 | 14.1x55 | 14.1x55:d16 | 14.1x55:d20 | 14.1x55:d25 | 14.1x55:d30 | 14.2 | 14.2:r1 | 14.2:r2 | 14.2:r3 | 14.2:r4 | 14.2:r5 | 14.2:r6 | 15.1 | 15.1:f1 | 15.1:f2 | 15.1:f3 | 15.1:f4 | 15.1:f5 | 15.1:r3 | 15.1x49 | 15.1x49:d10 | 15.1x49:d20 | 15.1x49:d30 | 15.1x49:d35 | 15.1x49:d40 | 15.1x49:d45 | 15.1x49:d50 | 15.1x49:d55 | 15.1x53 | 15.1x53:d10 | 15.1x53:d20 | 15.1x53:d21
Juniper networks1 product
  • junos os with dhcpv6 enabled11.4 prior to 11.4R13-S3 | 12.1X46 prior to 12.1X46-D60 | 12.3 prior to 12.3R12-S2 or 12.3R13 | 12.3X48 prior to 12.3X48-D40 | 13.2X51 prior to 13.2X51-D40 | 13.3 prior to 13.3R10 | 14.1 prior to 14.1R8 | 14.1X53 prior to 14.1X53-D12 or 14.1X53-D35 | 14.1X55 prior to 14.1X55-D35 | 14.2 prior to 14.2R7 | 15.1 prior to 15.1F6 or 15.1R3 | 15.1X49 prior to 15.1X49-D60 | 15.1X53 prior to 15.1X53-D30 | 16.1R1 and all subsequent releases include a fix.

2 vendors · 2 products

References

3 links