Juniper Junos CVE-2014-3818 Remote Denial of Service Vulnerability

Bugtraq ID:	70361
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3818
Remote:	Yes
Local:	No
Published:	Oct 09 2014 12:00AM
Updated:	Oct 09 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper Junos 14.1 Juniper Junos 13.3R1 Juniper Junos 13.3 Juniper Junos 13.2X50-D15.3 Juniper Junos 13.1R4 Juniper Junos 12.3 Juniper Junos 12.2X50-D50.1 Juniper Junos 12.2X50-D40.5 Juniper Junos 12.2R7 Juniper Junos 12.2R1.3 Juniper Junos 12.2R1 Juniper Junos 12.2 Juniper Junos 12.1X47-D10 Juniper Junos 12.1x47 Juniper Junos 12.1X46-D25 Juniper Junos 12.1X46-D20.5 Juniper Junos 12.1X46-D20 Juniper Junos 12.1X46-D10 Juniper Junos 12.1X46 Juniper Junos 12.1X44-D35 Juniper Junos 12.1X44-D34 Juniper Junos 12.1X44-D32 Juniper Junos 12.1X44-D30.4 Juniper Junos 12.1X44-D30 Juniper Junos 12.1X44-D26 Juniper Junos 12.1X44-D20.3 Juniper Junos 12.1X44-D20 Juniper Junos 12.1R Juniper Junos 12.1 Juniper Junos 11.4R10.3 Juniper Junos 11.4R10-S1 Juniper Junos 11.4R10 Juniper Junos 11.4R1.6 Juniper Junos 11.4
Not Vulnerable:	Juniper Junos 14.1R1 Juniper Junos 13.3R2 Juniper Junos 13.2X52-D15 Juniper Junos 13.2X51-D25 Juniper Junos 13.2X50-D20 Juniper Junos 13.2R4 Juniper Junos 13.1X50-D30 Juniper Junos 13.1X49-D49 Juniper Junos 13.1R4-S2 Juniper Junos 12.3R6 Juniper Junos 12.2X50-D70 Juniper Junos 12.2R8 Juniper Junos 12.1X48-D62 Juniper Junos 12.1X48-D41 Juniper Junos 12.1X47-D15 Juniper Junos 12.1X47-D11 Juniper Junos 12.1X46-D30 Juniper Junos 12.1X44-D40 Juniper Junos 12.1R10 Juniper Junos 11.4R11

Juniper Junos CVE-2014-3818 Remote Denial of Service Vulnerability

Juniper Junos is prone to a remote denial-of-service vulnerability.

Exploiting this issue may allow remote attackers to crash and restart the RPD (Routing Protocol Daemon), causing denial-of-service conditions.

Juniper Junos CVE-2014-3818 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Juniper Junos CVE-2014-3818 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos CVE-2014-3818 Remote Denial of Service Vulnerability

References:

• Juniper Networks Homepage (Juniper Networks)
  
• 2014-10 Security Bulletin: Junos: BGP UPDATE with crafted transitive attributes (Juniper)