PT-2015-3857 · Juniper Networks · Junos

Published 2015-10-16 · Updated 2016-12-08 · CVE-2014-6450

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 11.4R12-S4 Juniper Junos OS versions prior to 12.1X44-D41 Juniper Junos OS versions prior to 12.1X46-D26 Juniper Junos OS versions prior to 12.1X47-D11/D15 Juniper Junos OS versions prior to 12.2R9 Juniper Junos OS versions prior to 12.2X50-D70 Juniper Junos OS versions prior to 12.3R8 Juniper Junos OS versions prior to 12.3X48-D10 Juniper Junos OS versions prior to 12.3X50-D42 Juniper Junos OS versions prior to 13.1R4-S3 Juniper Junos OS versions prior to 13.1X49-D42 Juniper Junos OS versions prior to 13.1X50-D30 Juniper Junos OS versions prior to 13.2R6 Juniper Junos OS versions prior to 13.2X51-D26 Juniper Junos OS versions prior to 13.2X52-D15 Juniper Junos OS versions prior to 13.3R3-S3 Juniper Junos OS versions prior to 14.1R3 Juniper Junos OS versions prior to 14.2R1 Juniper Junos OS versions prior to 15.1R1 Juniper Junos OS versions prior to 15.1X49-D10

Description The issue allows remote attackers to cause a denial of service via crafted IPv6 packets when the system is configured for IPv6, resulting in mbuf chain corruption and kernel panic.

Recommendations Update to version 11.4R12-S4 or later Update to version 12.1X44-D41 or later Update to version 12.1X46-D26 or later Update to version 12.1X47-D11/D15 or later Update to version 12.2R9 or later Update to version 12.2X50-D70 or later Update to version 12.3R8 or later Update to version 12.3X48-D10 or later Update to version 12.3X50-D42 or later Update to version 13.1R4-S3 or later Update to version 13.1X49-D42 or later Update to version 13.1X50-D30 or later Update to version 13.2R6 or later Update to version 13.2X51-D26 or later Update to version 13.2X52-D15 or later Update to version 13.3R3-S3 or later Update to version 14.1R3 or later Update to version 14.2R1 or later Update to version 15.1R1 or later Update to version 15.1X49-D10 or later

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-6450

Affected Products

Junos

References · 3

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-6450 · Security Note
• http://securitytracker.com/id/1033855 · Note