Lucene search

K
cve[email protected]CVE-2014-3822
HistoryJul 11, 2014 - 8:55 p.m.

CVE-2014-3822

2014-07-1120:55:02
CWE-20
web.nvd.nist.gov
24
juniper
junos
cve-2014-3822
srx series
denial of service
flowd crash
ipv6
ipv4

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.5%

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service (flowd crash) via a malformed packet, related to translating IPv6 to IPv4.

Affected configurations

NVD
Node
juniperjunosMatch11.4
OR
juniperjunosMatch12.1
OR
juniperjunosMatch12.1x44
OR
juniperjunosMatch12.1x45
OR
juniperjunosMatch12.1x46
OR
juniperjunosMatch12.1x47
AND
junipersrx100Match-
OR
junipersrx110Match-
OR
junipersrx1400Match-
OR
junipersrx210Match-
OR
junipersrx220Match-
OR
junipersrx240Match-
OR
junipersrx3400Match-
OR
junipersrx3600Match-
OR
junipersrx550Match-
OR
junipersrx5600Match-
OR
junipersrx5800Match-
OR
junipersrx650Match-

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.5%

Related for CVE-2014-3822