CVE-2016-1262: Juniper Junos

Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days.

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet.

Affected products

• Juniper Junos: up to and including 12.1x46; version 12.1x47 only; version 12.3x48 only; version 15.1x49 only

Published 2016-01-15. Last modified 2026-06-17.