CVE-2013-4684

flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted PIM packets, aka PR 842253.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2013-07-11

Last modified

2024-08-06

Affected products

• Junos (Juniper)
• Srx100 (Juniper)
• Srx110 (Juniper)
• Srx1400 (Juniper)
• Srx210 (Juniper)
• Srx220 (Juniper)
• Srx240 (Juniper)
• Srx3400 (Juniper)
• Srx3600 (Juniper)
• Srx550 (Juniper)
• Srx5600 (Juniper)
• Srx5800 (Juniper)
• Srx650 (Juniper)

References

• http://kb.juniper.net/JSA10573
• http://osvdb.org/95107
• http://secunia.com/advisories/54157
• http://www.securityfocus.com/bid/61127