CVE-2014-3822

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service (flowd crash) via a malformed packet, related to translating IPv6 to IPv4.

Score

CVSS 2.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2014-07-11

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Junos (Juniper)
• Srx100 (Juniper)
• Srx110 (Juniper)
• Srx1400 (Juniper)
• Srx210 (Juniper)
• Srx220 (Juniper)
• Srx240 (Juniper)
• Srx3400 (Juniper)
• Srx3600 (Juniper)
• Srx550 (Juniper)
• Srx5600 (Juniper)
• Srx5800 (Juniper)
• Srx650 (Juniper)

References

• http://www.securitytracker.com/id/1030560
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10641