CVE-2017-2340: Juniper Junos

Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days.

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can result in a PFE (Packet Forwarding Engine) hang or crash.

Affected products

• Juniper Junos: version 15.1 only; version 16.1 only

Published 2017-04-24. Last modified 2026-06-17.