PT-2013-5134 · Juniper Networks · Junos

Publicado 2013-07-11 · Atualizado 2013-08-22 · CVE-2013-4684

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos versions 10.4 through 10.4S13 Junos versions 11.4 through 11.4R7 Junos versions 12.1 through 12.1R6 Junos versions 12.1X44 through 12.1X44-D14

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted PIM packets when PIM and NAT are enabled on SRX devices.

Recommendations For Junos versions 10.4 through 10.4S13, update to version 10.4S14 or later. For Junos versions 11.4 through 11.4R7, update to version 11.4R8 or later. For Junos versions 12.1 through 12.1R6, update to version 12.1R7 or later. For Junos versions 12.1X44 through 12.1X44-D14, update to version 12.1X44-D15 or later.

Correção

Identificadores relacionados

CVE-2013-4684

Produtos afetados

Junos

Referências · 5

• http://secunia.com/advisories/54157 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4684 · Nota de Segurança
• http://securityfocus.com/bid/61127 · Nota
• http://kb.juniper.net/JSA10573 · Aviso do Fabricante
• http://osvdb.org/95107 · Nota