PT-2014-4878 · Juniper Networks · Junos

Publicado 2014-04-14 · Atualizado 2014-05-05 · CVE-2014-2713

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Juniper Junos versions before 11.4R11 Juniper Junos versions before 12.1R9 Juniper Junos versions before 12.2R7 Juniper Junos versions 12.3R4 before 12.3R4-S3 Juniper Junos versions before 13.1R4 Juniper Junos versions before 13.2R2 Juniper Junos versions before 13.3R1

Description The issue allows remote attackers to cause a denial of service, resulting in a PFE restart, by sending a crafted IP packet to certain Trio or Cassis-based Packet Forwarding Engine (PFE) modules.

Recommendations For Juniper Junos versions before 11.4R11, update to version 11.4R11 or later. For Juniper Junos versions before 12.1R9, update to version 12.1R9 or later. For Juniper Junos versions before 12.2R7, update to version 12.2R7 or later. For Juniper Junos versions 12.3R4 before 12.3R4-S3, update to version 12.3R4-S3 or later. For Juniper Junos versions before 13.1R4, update to version 13.1R4 or later. For Juniper Junos versions before 13.2R2, update to version 13.2R2 or later. For Juniper Junos versions before 13.3R1, update to version 13.3R1 or later.

Correção

Identificadores relacionados

CVE-2014-2713

Produtos afetados

Junos

Referências · 3

• http://securityfocus.com/bid/66764 · Nota
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10621 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-2713 · Nota de Segurança