PT-2013-5137 · Juniper Networks · Junos

Publicado 2013-07-11 · Atualizado 2013-08-22 · CVE-2013-4687

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.4S14 Junos versions 11.2 and 11.4 prior to 11.4R6-S2 Junos versions 12.1 prior to 12.1R6 on SRX devices

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted TCP packets when certain Application Layer Gateways (ALGs) are enabled.

Recommendations For Junos versions prior to 10.4S14, update to version 10.4S14 or later. For Junos versions 11.2 and 11.4 prior to 11.4R6-S2, update to version 11.4R6-S2 or later. For Junos versions 12.1 prior to 12.1R6 on SRX devices, update to version 12.1R6 or later.

Correção

Identificadores relacionados

CVE-2013-4687

Produtos afetados

Junos

Referências · 3

• http://securityfocus.com/bid/61122 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4687 · Nota de Segurança
• http://kb.juniper.net/JSA10577 · Aviso do Fabricante