PT-2014-3710 · Juniper Networks · Junos

Published 2014-04-14 · Updated 2014-04-15 · CVE-2014-0614

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 13.2 before 13.2R3 Juniper Junos versions 13.3 before 13.3R1

Description The issue allows remote attackers to cause a denial of service, resulting in a kernel panic and crash, by sending a large number of crafted IGMP packets when PIM is enabled.

Recommendations For Juniper Junos versions 13.2 before 13.2R3, update to version 13.2R3 or later. For Juniper Junos versions 13.3 before 13.3R1, update to version 13.3R1 or later.

Fix

Related Identifiers

CVE-2014-0614

Affected Products

Junos

References · 5

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10618 · Vendor Advisory
• http://secunia.com/advisories/57819 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0614 · Security Note
• http://securitytracker.com/id?1030062 · Note
• http://securityfocus.com/bid/66762 · Note