Juniper Networks ScreenOS SSL/TLS Protocol Packet Handling Denial of Service Vulnerability

Bugtraq ID:	66802
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-2842
Remote:	Yes
Local:	No
Published:	Apr 14 2014 12:00AM
Updated:	May 19 2014 01:42AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Juniper Networks ScreenOS SSL/TLS Protocol Packet Handling Denial of Service Vulnerability

ScreenOS is prone to a denial-of-service vulnerability.

Successful exploits may allow the attacker to cause denial-of-service conditions.

ScreenOS 6.3 is vulnerable; other versions may also be affected.

Juniper Networks ScreenOS SSL/TLS Protocol Packet Handling Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Juniper Networks ScreenOS SSL/TLS Protocol Packet Handling Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Networks ScreenOS SSL/TLS Protocol Packet Handling Denial of Service Vulnerability

References:

• Juniper Networks Homepage (Juniper Networks)