CVE-2013-6170

Name: CVE-2013-6170
Creator: NVD / NIST
Published: 2013-10-17T23:55:04.737+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.02%

Last modified Jun 17, 2026

CVE-2013-6170 is a vulnerability of currently unknown severity. Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a denial of service (RPD routing daemon crash) via a large number of crafted PIM (S,G) join requests.. EPSS estimates a 2.02% chance of exploitation in the next 30 days.

Description

Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a denial of service (RPD routing daemon crash) via a large number of crafted PIM (S,G) join requests.

Metrics

EPSS Probability

2.02%

78.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Juniper	Junos	10.0
Juniper	Junos	10.4
Juniper	Junos	11.1
Juniper	Junos	11.2
Juniper	Junos	11.4

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10548Vendor Advisory
http://secunia.com/advisories/55216Vendor Advisory
http://www.securityfocus.com/bid/62973
http://www.securitytracker.com/id/1029176
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10548Vendor Advisory
http://secunia.com/advisories/55216Vendor Advisory
http://www.securityfocus.com/bid/62973
http://www.securitytracker.com/id/1029176

Timeline

Published: Oct 17, 2013
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-6170?

How severe is CVE-2013-6170?

Severity scoring for CVE-2013-6170 is pending analysis. The EPSS model estimates a 2.02% probability of exploitation in the next 30 days.

How do I fix CVE-2013-6170?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-6170?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST