CVE-2014-6377 - Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity ic

CVE-2014-6377

Summary

Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service (SRP reset) via a crafted ICMP packet to the (1) interface or (2) loopback IP address, which triggers a processor exception in ip_RxData_8.

References

Vulnerable Configurations

cpe:2.3:o:juniper:junos_e:13.3.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:13.3.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:13.3.1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:13.3.1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:-:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:-:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:7.0.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:7.0.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:14.3.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:14.3.0:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:14.3.1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_e:14.3.1:*:*:*:*:*:*:*

CVSS

Base:	7.8 (as of 08-09-2017 - 01:29)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:C

refmap via4

bid	70368
confirm	https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10651
sectrack	1031006
xf	juniper-junos-cve20146377-dos(96907)

Last major update

08-09-2017 - 01:29

Published

14-10-2014 - 14:55

Last modified

08-09-2017 - 01:29