Juniper Junos CVE-2014-3825 Denial of Service Vulnerability

Bugtraq ID:	70366
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3825
Remote:	Yes
Local:	No
Published:	Oct 08 2014 12:00AM
Updated:	Oct 08 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper Junos 12.1x47 Juniper Junos 12.1X46-D20 Juniper Junos 12.1X46-D10 Juniper Junos 12.1X46 Juniper Junos 12.1X45-D25 Juniper Junos 12.1X45-D20 Juniper Junos 12.1X45-D10 Juniper Junos 12.1X45- D15 Juniper Junos 12.1X45 Juniper Junos 12.1X44-D35 Juniper Junos 12.1X44-D34 Juniper Junos 12.1X44-D32 Juniper Junos 12.1X44-D30.4 Juniper Junos 12.1X44-D30 Juniper Junos 12.1X44-D26 Juniper Junos 12.1X44-D20.3 Juniper Junos 12.1X44-D20 Juniper Junos 12.1X44 Juniper Junos 11.4R12
Not Vulnerable:	Juniper Junos 12.1X47-D10 Juniper Junos 12.1X46-D25 Juniper Junos 12.1X45-D30 Juniper Junos 12.1X44-D40 Juniper Junos 11.4R12-S4

Juniper Junos CVE-2014-3825 Denial of Service Vulnerability

Juniper Junos is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to crash, denying service to legitimate users.

Note: This issue affects on SRX series devices.

Juniper Junos CVE-2014-3825 Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Juniper Junos CVE-2014-3825 Denial of Service Vulnerability

References:

• Juniper HomePage (Juniper)
  
• 2014-10 Security Bulletin: Junos: SRX flowd denial of service vulnerability rela (Juniper Networks)