Lucene search
HistoryJul 11, 2013 - 2:55 p.m.
CVE-2013-4688
cve-2013-4688
juniper
junos
srx devices
msrpc
alg
denial of service
daemon crash
pr 772834
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.7%
flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834.
Affected configurations
Node
juniperjunosMatch10.4
junipersrx100Match-
ORjunipersrx110Match-
ORjunipersrx1400Match-
ORjunipersrx210Match-
ORjunipersrx220Match-
ORjunipersrx240Match-
ORjunipersrx3400Match-
ORjunipersrx3600Match-
ORjunipersrx550Match-
ORjunipersrx5600Match-
ORjunipersrx5800Match-
ORjunipersrx650Match-
Related
prion
prion
Code injection
2013-07-11 14:55:00
nessus
nessus
Juniper Junos SRX Series MSRPC DoS (JSA10578)
2013-07-16 00:00:00
nvd
nvd
CVE-2013-4688
2013-07-11 14:55:01
cvelist
cvelist
CVE-2013-4688
2013-07-11 14:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.7%
Related for CVE-2013-4688