Lucene search

K
cve[email protected]CVE-2014-6386
HistoryJan 16, 2015 - 4:59 p.m.

CVE-2014-6386

2015-01-1616:59:07
CWE-17
web.nvd.nist.gov
21
juniper
junos
cve-2014-6386
denial of service
bgp
flowspec

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before 12.3R3, 13.1 before 13.1R4, and 13.2 before 13.2R1 allows remote attackers to cause a denial of service (assertion failure and rpd restart) via a crafted BGP FlowSpec prefix.

Affected configurations

NVD
Node
juniperjunosMatch11.4r1
OR
juniperjunosMatch11.4r2
OR
juniperjunosMatch11.4r3
OR
juniperjunosMatch11.4r4
OR
juniperjunosMatch11.4r5
OR
juniperjunosMatch11.4r6
OR
juniperjunosMatch11.4r7
OR
juniperjunosMatch12.1x44
OR
juniperjunosMatch12.1x44d10
OR
juniperjunosMatch12.1x44d15
OR
juniperjunosMatch12.1x44d20
OR
juniperjunosMatch12.1x44d25
OR
juniperjunosMatch12.1x44d30
OR
juniperjunosMatch12.1x45
OR
juniperjunosMatch12.1x45d10
OR
juniperjunosMatch12.1x45d15
OR
juniperjunosMatch12.1x45d20
OR
juniperjunosMatch12.1x46
OR
juniperjunosMatch12.1x46d10
OR
juniperjunosMatch12.1x46d15
OR
juniperjunosMatch12.1x47
OR
juniperjunosMatch12.2
OR
juniperjunosMatch12.2r1
OR
juniperjunosMatch12.2r2
OR
juniperjunosMatch12.2r3
OR
juniperjunosMatch12.2r4
OR
juniperjunosMatch12.2r5
OR
juniperjunosMatch12.2r6
OR
juniperjunosMatch12.2r7
OR
juniperjunosMatch12.2r8
OR
juniperjunosMatch12.3
OR
juniperjunosMatch12.3r1
OR
juniperjunosMatch12.3r2
OR
juniperjunosMatch13.1
OR
juniperjunosMatch13.1r1
OR
juniperjunosMatch13.1r2
OR
juniperjunosMatch13.1r3
OR
juniperjunosMatch13.2

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

Related for CVE-2014-6386