CVE-2014-0617

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet.

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10610

http://osvdb.org/101863

http://www.securityfocus.com/bid/64764

http://www.securitytracker.com/id/1029583

Details

Source: MITRE

Published: 2014-01-15

Updated: 2014-01-15

Risk Information

CVSS v2

Base Score: 7.1

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 8.6

Severity: HIGH

Tenable Plugins

View all (1 total)

IDNameProductFamilySeverity
71999Juniper Junos SRX Series flowd Remote DoS (JSA10610)NessusJunos Local Security Checks
high