CVE-2013-4684 flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a deni...
HighCVSS 7.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted PIM packets, aka PR 842253.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | = 10.4 | No fix listed |
| juniper junos | = 11.4 | No fix listed |
| juniper junos | = 12.1 | No fix listed |
| juniper junos | = 12.1x44 | No fix listed |
| juniper srx100 | All versions | No fix listed |
| juniper srx110 | All versions | No fix listed |
| juniper srx1400 | All versions | No fix listed |
| juniper srx210 | All versions | No fix listed |
| juniper srx220 | All versions | No fix listed |
| juniper srx240 | All versions | No fix listed |
| juniper srx3400 | All versions | No fix listed |
| juniper srx3600 | All versions | No fix listed |
| juniper srx550 | All versions | No fix listed |
| juniper srx5600 | All versions | No fix listed |
| juniper srx5800 | All versions | No fix listed |
| juniper srx650 | All versions | No fix listed |
References
- kb.juniper.net vendor-advisory
- 95107 vdb-entry
- 54157 third-party-advisory
- 61127 vdb-entry