Junos OS: A kernel hang may occur due to a specific loopback filter action command

Description

A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined action, to hang the kernel. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55; 12.3X48 prior to 12.3X48-D35; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D40; 14.2 prior to 14.2R4-S9, 14.2R7-S8, 14.2R8; 15.1 prior to 15.1F5-S3, 15.1F6, 15.1R4; 15.1X49 prior to 15.1X49-D60; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue.

Scores

EPSS (exploitation in 30 days)

0.31% · top 76% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

• kernel hang
• resource consumption
• CWE-400 (opens in a new tab)All about CWE-400 and its CVEs

Affected products

• Juniper Networks · Junos OS

  • affected 12.1X46 prior to 12.1X46-D55
  • affected 12.3X48 prior to 12.3X48-D35
  • affected 14.1 prior to 14.1R8-S4, 14.1R9
  • affected 14.1X53 prior to 14.1X53-D40
  • affected 14.2 prior to 14.2R4-S9, 14.2R7-S8, 14.2R8
  • affected 15.1 prior to 15.1F5-S3, 15.1F6, 15.1R4
  • affected 15.1X49 prior to 15.1X49-D60
  • affected 15.1X53 prior to 15.1X53-D47
  • affected 16.1 prior to 16.1R2

What to do

Workaround: Discontinue the use of allowing remote sessions to be issued from the local device to reach loopback address(es). It is good security practice to limit the exploitable attack surface of critical infrastructure networking equipment. Use access lists or firewall filters to limit access to the device from trusted, administrative networks or hosts.

References (1)

• https://kb.juniper.net/JSA10816 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-10613](https://trackcve.app/badge/CVE-2017-10613.svg)](https://trackcve.app/cve/CVE-2017-10613)

Record last updated 16 Sept 2024, 17:03 UTC.