CVE-2017-10610
Last modified
CVE-2017-10610 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. EPSS estimates a 1.05% chance of exploitation in the next 30 days.
Description
On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D71, 12.3X48 prior to 12.3X48-D55, 15.1X49 prior to 15.1X49-D100 on SRX Series. No other Juniper Networks products or platforms are affected by this issue.
Metrics
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos | 12.1x46 | — |
| Juniper | Junos | 12.3x48 | D10 |
| Juniper | Junos | 15.1x49 | D10 |
References
- https://kb.juniper.net/JSA10813Vendor Advisory
- https://kb.juniper.net/JSA10813Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-10610?
How severe is CVE-2017-10610?
How do I fix CVE-2017-10610?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-10604When the device is configured to perform account lockout wit…5.3
- CVE-2017-10605On all vSRX and SRX Series devices, when the DHCP or DHCP re…8.6
- CVE-2017-10606Version 4.40 of the TPM (Trusted Platform Module) firmware o…4.4
- CVE-2017-10607Juniper Networks Junos OS 16.1R1, and services releases base…7.5
- CVE-2017-10608Any Juniper Networks SRX series device with one or more ALGs…7.5
- CVE-2017-1061Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2017-10611If extended statistics are enabled via 'set chassis extended…6.5
- CVE-2017-10612A persistent site scripting vulnerability in Juniper Network…8
- CVE-2017-10613A vulnerability in a specific loopback filter action command…5.5
- CVE-2017-10614A vulnerability in telnetd service on Junos OS allows a remo…5.3
- CVE-2017-10615A vulnerability in the pluggable authentication module (PAM)…9.8
- CVE-2017-10616The ifmap service that comes bundled with Juniper Networks C…5.3
Are you affected by CVE-2017-10610?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST