PT-2014-3710 · Juniper Networks · Junos

Publicado 2014-04-14 · Atualizado 2014-04-15 · CVE-2014-0614

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 13.2 before 13.2R3 Juniper Junos versions 13.3 before 13.3R1

Description The issue allows remote attackers to cause a denial of service, resulting in a kernel panic and crash, by sending a large number of crafted IGMP packets when PIM is enabled.

Recommendations For Juniper Junos versions 13.2 before 13.2R3, update to version 13.2R3 or later. For Juniper Junos versions 13.3 before 13.3R1, update to version 13.3R1 or later.

Correção

Identificadores relacionados

CVE-2014-0614

Produtos afetados

Junos

Referências · 5

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10618 · Aviso do Fabricante
• http://secunia.com/advisories/57819 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0614 · Nota de Segurança
• http://securitytracker.com/id?1030062 · Nota
• http://securityfocus.com/bid/66762 · Nota