CVE-2016-1275: Juniper Junos

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface.

Affected products

• Juniper Junos: up to and including 13.3; version 14.1 only

Published 2016-09-09. Last modified 2026-06-17.