CVE-2014-0618

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2014-01-11

Last modified

2024-08-06

Affected products

• Junos (Juniper)
• Srx100 (Juniper)
• Srx110 (Juniper)
• Srx1400 (Juniper)
• Srx210 (Juniper)
• Srx220 (Juniper)
• Srx240 (Juniper)
• Srx3400 (Juniper)
• Srx3600 (Juniper)
• Srx550 (Juniper)
• Srx5600 (Juniper)
• Srx5800 (Juniper)
• Srx650 (Juniper)

References

• http://osvdb.org/101864
• http://www.securityfocus.com/bid/64769
• http://www.securitytracker.com/id/1029584
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90238
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10611