PT-2014-4878 · Juniper Networks · Junos

Published 2014-04-14 · Updated 2014-05-05 · CVE-2014-2713

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Juniper Junos versions before 11.4R11 Juniper Junos versions before 12.1R9 Juniper Junos versions before 12.2R7 Juniper Junos versions 12.3R4 before 12.3R4-S3 Juniper Junos versions before 13.1R4 Juniper Junos versions before 13.2R2 Juniper Junos versions before 13.3R1

Description The issue allows remote attackers to cause a denial of service, resulting in a PFE restart, by sending a crafted IP packet to certain Trio or Cassis-based Packet Forwarding Engine (PFE) modules.

Recommendations For Juniper Junos versions before 11.4R11, update to version 11.4R11 or later. For Juniper Junos versions before 12.1R9, update to version 12.1R9 or later. For Juniper Junos versions before 12.2R7, update to version 12.2R7 or later. For Juniper Junos versions 12.3R4 before 12.3R4-S3, update to version 12.3R4-S3 or later. For Juniper Junos versions before 13.1R4, update to version 13.1R4 or later. For Juniper Junos versions before 13.2R2, update to version 13.2R2 or later. For Juniper Junos versions before 13.3R1, update to version 13.3R1 or later.

Fix

Related Identifiers

CVE-2014-2713

Affected Products

Junos

References · 3

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10621 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2713 · Security Note
• http://securityfocus.com/bid/66764 · Note