CVE-2006-3529
CVE-2006-3529 is a medium-severity vulnerability in Juniper Junos with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 4% (90th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Juniper Junos
- Published:
- Last modified:
Description
Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet memory consumption and crash) via crafted IPv6 packets whose buffers are not released after they are processed.
Frequently asked questions
- What is CVE-2006-3529?
- Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet memory consumption and crash) via crafted IPv6 packets whose buffers are not released after they are processed.
- How severe is CVE-2006-3529?
- CVE-2006-3529 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2006-3529 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (90th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-3529?
- CVE-2006-3529 primarily affects Juniper Junos. In total, 17 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-3529?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-3529 published?
- CVE-2006-3529 was published on 2006-07-12 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/21003
- http://securitytracker.com/id?1016460
- http://www.juniper.net/support/security/alerts/EXT-PSN-2006-06-017.txt
- http://www.juniper.net/support/security/alerts/IPv6_bug.txt
- http://www.kb.cert.org/vuls/id/294036
- http://www.osvdb.org/27132
- http://www.securityfocus.com/bid/18930
- http://www.vupen.com/english/advisories/2006/2742
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27654
Affected products (17)
- cpe:2.3:o:juniper:junos:6.4:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:6.5:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:6.6:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:6.7:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:6.8:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:6.9:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.5:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.6:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.8:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:7.9:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:8.0:*:*:*:*:*:*:*
More vulnerabilities in Juniper Junos
- CVE-2021-0248 — Critical (CVSS 10.0): This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in…
- CVE-2021-0211 — Critical (CVSS 10.0): An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing…
- CVE-2020-1614 — Critical (CVSS 10.0): A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF)…
- CVE-2017-2343 — Critical (CVSS 10.0): The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series…
- CVE-2013-4685 — Critical (CVSS 10.0): Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44…
- CVE-2017-2349 — Critical (CVSS 9.9): A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially…