PT-2014-3714 · Juniper Networks · Junos

Publicado 2014-01-11 · Atualizado 2017-08-29 · CVE-2014-0618

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Junos versions prior to 10.4R16 Juniper Junos versions prior to 11.4R8 Juniper Junos versions prior to 12.1R7 Juniper Junos versions prior to 12.1X44-D20 Juniper Junos versions prior to 12.1X45-D10

Description The issue allows remote attackers to cause a denial of service via a crafted HTTP message when the Juniper Junos is used as a UAC enforcer and captive portal is enabled, resulting in a flowd crash.

Recommendations For versions prior to 10.4R16, update to 10.4R16 or later. For versions prior to 11.4R8, update to 11.4R8 or later. For versions prior to 12.1R7, update to 12.1R7 or later. For versions prior to 12.1X44-D20, update to 12.1X44-D20 or later. For versions prior to 12.1X45-D10, update to 12.1X45-D10 or later.

Correção

Identificadores relacionados

CVE-2014-0618

Produtos afetados

Junos

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-0618 · Nota de Segurança
• http://securityfocus.com/bid/64769 · Nota
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10611 · Aviso do Fabricante
• http://securitytracker.com/id/1029584 · Nota
• http://osvdb.org/101864 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90238 · Nota