Juniper Junos CVE-2014-2713 Denial of Service Vulnerability

Bugtraq ID:	66764
Class:	Unknown
CVE:	CVE-2014-2713
Remote:	Yes
Local:	No
Published:	Apr 10 2014 12:00AM
Updated:	Apr 10 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper Junos 13.3 Juniper Junos 13.2 Juniper Junos 13.1R3-S1 Juniper Junos 13.1R.3-S1 Juniper Junos 13.1 Juniper Junos 12.3R4-S2 Juniper Junos 12.3 Juniper Junos 12.2R1 Juniper Junos 12.2 Juniper Junos 12.1R8-S3 Juniper Junos 12.1R8-S2 Juniper Junos 12.1R7 Juniper Junos 12.1R Juniper Junos 12.1 Juniper Junos 11.4R9 Juniper Junos 11.4R8 Juniper Junos 11.4R10-S1 Juniper Junos 11.4R10 Juniper Junos 11.4
Not Vulnerable:	Juniper Junos 13.3R1 Juniper Junos 13.2R2 Juniper Junos 13.1R4 Juniper Junos 12.3R5 Juniper Junos 12.3R4-S3 Juniper Junos 12.2R7 Juniper Junos 12.1R9 Juniper Junos 11.4R11

Juniper Junos CVE-2014-2713 Denial of Service Vulnerability

Juniper Junos is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected device, denying service to legitimate users.

Juniper Junos CVE-2014-2713 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos CVE-2014-2713 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos CVE-2014-2713 Denial of Service Vulnerability

References:

• 2014-04 Security Bulletin: Junos: Crafted IP packet can trigger PFE reboot on MX (Juniper Networks)
  
• Juniper Networks Homepage (Juniper Networks)