CVE-2013-4688

flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2013-07-11

Last modified

2024-08-06

Affected products

• Junos (Juniper)
• Srx100 (Juniper)
• Srx110 (Juniper)
• Srx1400 (Juniper)
• Srx210 (Juniper)
• Srx220 (Juniper)
• Srx240 (Juniper)
• Srx3400 (Juniper)
• Srx3600 (Juniper)
• Srx550 (Juniper)
• Srx5600 (Juniper)
• Srx5800 (Juniper)
• Srx650 (Juniper)

References

• http://kb.juniper.net/JSA10578
• http://www.securityfocus.com/bid/61124