CVE-2014-0618

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.

References

http://osvdb.org/101864

http://www.securityfocus.com/bid/64769

http://www.securitytracker.com/id/1029584

https://exchange.xforce.ibmcloud.com/vulnerabilities/90238

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10611

Details

Source: MITRE

Published: 2014-01-11

Updated: 2017-08-29

Risk Information

CVSS v2

Base Score: 7.8

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 10

Severity: HIGH

Tenable Plugins

View all (1 total)

IDNameProductFamilySeverity
72000Juniper Junos SRX Series flowd Remote DoS (JSA10611)NessusJunos Local Security Checks
high